Adversary Hunter Expert

Job Summary

To support a mission-driven team, the full-time Associate Principal Adversary Hunter will independently track and disrupt threats targeting ICS/OT environments, author intelligence products, and enhance analytical methodologies while working remotely.

Key responsibilities

• Provide expert-level coverage for Threat Groups and Temporary Activity Threads (TATs), authoring WorldView reports and representing the team in various publications and customer engagements
• Champion cross-team collaboration to enhance intelligence flow and support WorldView triage and reporting pipelines
• Lead threat hunting efforts during incident response engagements, offering advanced analytical support during high-priority incidents

Required qualifications

• 5+ years of experience in threat intelligence, adversary tracking, or threat hunting, particularly in ICS/OT environments
• Proven ability to independently author intelligence products and contribute to customer-facing deliverables
• Expert-level knowledge of the Diamond Model, Kill Chain stages, and MITRE ATT&CK for ICS
• Hands-on proficiency with network telemetry tools and file analysis platforms, along with knowledge of Synapse and Storm Query Language
• Experience leading threat hunting operations during live incident response engagements