Adversary Hunter

Job Summary

To support a mission-driven team, the full-time remote Associate Principal Adversary Hunter will independently track and disrupt threats targeting ICS/OT environments, author intelligence products, and enhance analytical methodologies while collaborating across functions.

Key responsibilities

• Provide expert-level coverage for Threat Groups and Temporary Activity Threats (TATs), authoring intelligence reports and representing the team in publications and customer engagements
• Champion cross-team collaboration to improve intelligence flow and enhance reporting pipelines
• Lead threat hunting efforts during incident response engagements and mentor junior analysts to elevate team capabilities

Required qualifications

• 5+ years of experience in threat intelligence, adversary tracking, or threat hunting with a focus on ICS/OT environments
• Proven ability to independently author finished intelligence products with minimal oversight
• Expert-level knowledge of the Diamond Model, Kill Chain stages, and MITRE ATT&CK for ICS
• Hands-on proficiency with network telemetry tools and file analysis platforms, as well as advanced knowledge of Synapse and Storm Query Language
• Experience leading threat hunting operations during live incident response engagements