Title:  Threat Intelligence Threat Hunting Specialist

Do you want to join one of the largest professional services organizations in the market?

Then Deloitte is the right place for you. Here, you will have the opportunity to accelerate your career and strengthen your skills within our technology ecosystem.

We are an international Tech Hub and are looking for the best Cybersecurity specialists to join our Centers of Excellence and our community. At Deloitte, you will help transform the world as we know it and develop unique, innovative solutions across a wide range of complex transformation projects, from Portugal to the world.

We are strengthening our Cyber practice and are looking for experienced professionals who enjoy working in teams and thrive in a multi-project environment. Depending on your profile, you will have the opportunity to take on a variety of roles and take the next step in your career.

Will you join us? We're waiting for you.

Your day by day and responsabilities:

• Monitor and analyze the global cyber threat landscape.
• Track APT groups, ransomware and cybercrime actors, malware families, phishing campaigns, and emerging threats.
• Create and maintain Threat Actor profiles and campaign assessments.
• Analyze adversary Tactics, Techniques, and Procedures (TTPs) using MITRE ATT&CK.
• Define and develop Threat Hunting hypotheses based on Threat Intelligence.
• Conduct proactive Threat Hunting activities across endpoints, identities, networks, email, and cloud environments.
• Perform hunting activities based on IOCs, behaviors, and TTPs.
• Correlate external Threat Intelligence with internal security telemetry.
• Investigate suspicious behaviors and potential indicators of compromise.
• Conduct historical Threat Hunting when new threats, intelligence, or TTPs emerge.
• Identify visibility and detection gaps uncovered during Threat Hunting activities.
• Produce clear and actionable Threat Intelligence and Threat Hunting reports.
• Share relevant intelligence and hunting findings with SOC, Incident Response, and Cyber Defense teams.

Are you the one we are looking for?

• 3+ years of experience in Threat Intelligence, Threat Hunting, SOC, or Incident Response.
• Strong knowledge of the cyber threat landscape and adversary behavior.
• Hands-on experience with MITRE ATT&CK.
• Experience with SIEM, EDR, and Threat Intelligence platforms.
• Ability to transform Threat Intelligence into structured Threat Hunting hypotheses.
• Experience analyzing large volumes of security telemetry.
• Strong analytical, investigative, and communication skills.
• Ability to clearly communicate technical findings to both technical and non-technical audiences.

Technical & Management Knowledge

Experience with some of the following technologies and frameworks:

• Threat Intelligence: Recorded Future; MISP; OpenCTI; ThreatConnect; Anomali; VirusTotal.
• Threat Hunting: Microsoft Sentinel / Defender XDR; Splunk; CrowdStrike Falcon; QRadar Suite; Palo Alto XSIAM; FortiSIEM; Elastic.
• Languages & Frameworks: KQL / SPL; Sigma / YARA; MITRE ATT&CK; STIX / TAXII; Diamond Model.

Nice to Have

• Experience working in MSSP/MDR or multi-customer environments.
• Experience with OSINT and dark web research.
• Knowledge and experience in malware and phishing analysis.
• Experience in cloud and identity-focused Threat Hunting.
• Knowledge of Python or PowerShell for Threat Intelligence automation.
• Relevant certifications such as GIAC GCTI, GOSI, SANS FOR578, MITRE ATT&CK Defender, or CTIA.

Build a career tailored to you

• Work in a diverse environment that promotes continuous learning and development;
• Benefit from a personalized career development plan, aligned with your career stage, needs, and goals, including both technical and functional growth opportunities;
• Participate in impactful national and international projects within your area of expertise;
• Enjoy unlimited access to leading online learning platforms such as LinkedIn Learning and Udemy;
• Access training and certification opportunities in the latest technologies, particularly Cloud technologies.

Be part of a culture of connection

• Join a culture of innovation and excellence that makes us leaders and trendsetters;
• Work in a friendly environment built on respect, trust, transparency, and informality;
• Become part of a lifelong network that connects you with leading knowledge, experts, and industry leaders;
• Participate in our communities (Technology, Innovation, Sports, and other interests) and engage in social responsibility initiatives.

About Deloitte

At Deloitte, you will never work alone. You will have the opportunity to be involved in a wide range of transformation projects and be part of a team that will inspire and support you in developing differentiated solutions in a dynamic and collaborative environment, where you can perform at your best while benefiting from our well-being and flexibility initiatives.

We are more than 5,500 professionals in Portugal, of whom over 2,600 work in technology-related areas, operating from offices and Digital Studios in Lisbon, Porto, Braga, Viseu, Coimbra, and Faro, as well as technology hubs in Braga.

In addition, our teams in Portugal have a strong international footprint, demonstrating our global leadership in low-code/no-code solutions, telecommunications network engineering, organizational transformation platforms (ServiceNow and Apptio), and the financial services industry (Finastra, TIA, and Guidewire).

If you are interested in exploring and developing your skills in technology solutions such as Software Engineering, Cloud, Systems Integration, Data Analytics & Data Science, Cyber Risk, Telecommunications Network Engineering, and UX Design, and would like to work with technologies such as AWS, Google Cloud, Oracle, Salesforce, SAP, MuleSoft, Feedzai, and SAS, then you are in the right place.

Learn more at www.deloitte.com/pt/careers

Keywords: About Deloitte | Consulting | Technology

#LI-HYBRID #LI-CA1
#TECHDTT #Experienced