Cyber Risk Defense Consultant, Threat Hunting Lead

Salary: $102,000 - 142,000 per year Requirements:

• We are seeking at least two years of experience in an informal leadership capacity working with project or technical teams.
• We require a bachelors degree in Business Administration, Computer Science, Social Science, Mathematics, or a related discipline, or equivalent work experience in lieu of the degree.
• We expect a minimum of eight years of experience in IT or a related field.
• We require at least two years of experience in information security or network engineering.

• We lead proactive monitoring and response efforts for known and emerging threats across our network.
• We communicate investigative results clearly to non-technical audiences.
• We plan and facilitate regular operations meetings with our Cyber Risk Defense Center teams.
• We support closed-loop security processes by sharing feedback with our TDA leads and leadership.
• We contribute to information fusion across operations and engineering, including use case planning, quality assurance validation, and response procedure documentation.
• We act as a liaison between stage teams and senior management to identify issues, improvement opportunities, and security or architectural gaps, and to recommend enhancements.
• We drive improvements to our intellectual capital by improving processes and procedures, supporting brown bag training sessions, and developing training materials.
• We partner with our Policy Engineers and Remediation teams to contain issues and strengthen our security posture.
• We facilitate follow-up remediation design and review activities.
• We lead the investigation and triage of security events across multiple domains.
• We conduct complex data analyses to support security event management, including root cause analysis.
• We coordinate response and resolution for high-impact or critical cybersecurity incidents.
• We lead the deployment of threat detection capabilities and incident response plans, including after-hours coordination when needed.
• We drive incident detection and handling activities, including containment, protection, and remediation.

• Cloud
• Support
• Network
• Security
• DevOps

More:

We are Kaiser Permanente, and this senior technical role sits within our Threat Intelligence and Detection Engineering (TIDE) team as the technical lead for our Threat Hunting function. In this position, we work to proactively identify advanced threats by using threat intelligence and analyzing endpoint, network, cloud, identity, email, asset, and other security telemetry. We collaborate closely with Threat Intelligence, Detection Engineering, Incident Response, and Cyber Defense teams to strengthen our security posture, close coverage gaps, mentor analysts, and communicate insights to both technical and executive audiences. We are looking for a collaborative, intellectually curious cybersecurity professional who is motivated by emerging threats, data-driven analysis, and continuous improvement.

last updated 33 week of 2026