Lead Threat Hunter

Job Summary

Leading hypothesis-driven, intelligence-led hunts across enterprise, cloud, and OT/IoT environments, the fully remote Lead Threat Hunter will proactively identify adversary tradecraft that evades existing detections and operationalize findings into durable detection logic while collaborating with various teams to enhance security measures.

Key Responsibilities

• Lead intelligence-led hunt campaigns mapped to MITRE ATT&CK, from formulation through reporting
• Design and execute custom analytics against large-scale security telemetry to uncover adversary tradecraft
• Convert hunt findings into durable detections, signatures, and SOAR playbooks in partnership with Detection Engineering

Required Qualifications

• 7+ years of experience in security operations, with 4+ years focused on threat hunting
• Deep experience in large, complex enterprise environments and executing MITRE ATT&CK-aligned hunts
• Hands-on experience with modern SIEM and EDR/XDR tools
• Demonstrated experience using AI/LLM-assisted tooling for enhancing hunting capabilities
• Strong scripting and automation skills in Python, PowerShell, GO, and/or Bash