Staff Cyber Threat Hunter

The Challenge

As a Staff Cyber Threat Hunter, you will direct proactive threat hunting campaigns to reveal advanced adversary activity that avoids standard defense mechanisms. You will act as a self-motivated technical leader. You will lead in-depth hunts and convert uncertain signals into justifiable conclusions. You will evolve findings into scalable improvements related to threat identification and prevention.

This role suits someone passionate about cybersecurity who enjoys ongoing learning, contemporary data analysis, and creating solutions to lower attacker dwell time and business risk.

What You Will Do

Lead hunt campaigns: threat model, scope, implement, and complete high-complexity hunting campaigns informed by threat intelligence and business risk. Document hunting approach, research, and outcomes with actionable insights for long-term knowledge retention.

Apply data-driven techniques: leverage statistical and ML-based hunting methods to analyze large datasets, identify anomalies, and surface weak signals at scale.

Operationalize results: partner with Detection Engineering to convert hunt findings into durable detections, analytics, and improved instrumentation.

Build automation: develop simple tools and automated solutions to fast-track hunting and investigation workflows through Python, APIs, and up-to-date development methods.

Collaborate broadly: work closely with CSIRT, Threat Intelligence, Red Team, Security Engineering, and product teams to create multi-functional security impact.

Communicate clearly: distill complex investigations and risk into clear, actionable updates for technical collaborators and senior leadership.

Mentor others: share knowledge and guidelines to raise the overall maturity and efficiency of the threat hunting program.

What You Need

Staff-level expertise: demonstrable ability to operate independently in unstructured problem spaces and lead complex technical investigations.

Deep hunting experience: strong background investigating modern environments (cloud, Kubernetes, endpoints, CI/CD, identity, networking) and applying adversary TTP knowledge.

Passion for cybersecurity: genuine enthusiasm for threat hunting and staying current with evolving threats, attacker innovation, and defensive techniques.

Continuous learner: actively keeps skills updated with new technology trends, including AI-enabled systems and emerging AI-related threats.

Engineering approach: experience building automation and workflow improvements using Python, APIs, Git, and CI/CD pipelines.

Query expertise: advanced proficiency with SIEM and data platform query languages such as SPL, SQL, KQL, or equivalent.

ML-aware approach: understanding of ML and statistical concepts (e.g., anomaly detection, baselining) and how to apply them in threat hunting.

Experience: Over 10 years in cybersecurity specializing in detection and response.