Senior Threat Hunter

Nordic Investin Group•Stockholm, ME

About The Position

Nordic Investin is recruiting a Senior Threat Hunter for a partner company strengthening its capability in hypothesis-driven hunting across endpoint, identity, cloud and network data. The role connects threat hunting, endpoint detection and query languages, while ensuring intelligence and incident response are handled with appropriate discipline. The aim is to make practical progress that colleagues can use, leaders can evaluate and the organisation can sustain. The role works with product, architecture, security, operations and domain colleagues. The environment values short feedback loops, evidence from real systems, direct communication, visible trade-offs and engineering discipline, with security and operability considered in the design. The successful candidate will exercise independent judgement, raise the quality of work around them, know when a decision needs wider expertise and move work forward without unnecessary process. The position offers meaningful ownership and the opportunity to influence both the solution and decisions around it, including priorities and success measures. The exact partner, employment model, compensation, start date and working arrangement will be explained during the recruitment process.

Requirements

Relevant experience delivering hypothesis-driven hunting across endpoint, identity, cloud and network data in a demanding environment.
Strong working knowledge of threat hunting and endpoint detection.
Practical experience applying query languages and intelligence.
Ability to assess priorities, risks and trade-offs involving incident response.
Evidence of clear stakeholder communication and dependable end-to-end ownership.
Professional English.
Judgement to work with sensitive or business-critical information.

Nice To Haves

Experience from mature security operations and critical services.
Exposure to reporting in a cross-functional or multi-team environment.
Swedish language skills or experience working across Nordic organisations.
A background in product engineering, platform work, enterprise technology or consulting, with technical depth connected to user and business consequences.
Adjacent experience demonstrating transferable judgement.

Responsibilities

Own the practical direction for hypothesis-driven hunting across endpoint, identity, cloud and network data.
Translate goals and constraints into a clear approach for threat hunting and endpoint detection.
Establish useful standards, routines or decision artefacts around query languages.
Coordinate stakeholders and dependencies affecting intelligence.
Use evidence and measurable outcomes to improve incident response.
Strengthen knowledge sharing and sustainable ownership through reporting.