CareerPlan

2nd Line Threat Hunter & Detection Engineer

Stockholm, Stockholm County, seFull-time2026-11-09 → 2026-11-10
Based in Sweden

Core

Proactive threat hunting and detection engineering to identify, analyze, and stop advanced cyber threats by converting new attack methods into stronger detections.

Role type

2nd Line Threat Hunter & Detection Engineer

Builds

Detection rules, use cases, and playbooks for SIEM and EDR systems

Domain

Cybersecurity, Threat Intelligence, Incident Response

Deliverable

production ML models

Required skills

Threat hunting, SIEM, EDR, MITRE ATT&CK, log and data analysis, network protocols, Windows/Linux security analysis, detection rule development

Preferred skills

Threat Intelligence, Purple/Red Teaming, Detection-as-Code

Responsibilities

Conduct hypothesis-based threat hunting, develop and maintain SIEM detection rules, analyze security incidents to improve detection capabilities, collaborate on SOC processes and playbooks

Seniority

Mid-Senior, hands-on IC