Principal Threat Hunter

Job Summary

As the first full-time Principal Threat Hunter in a fully remote capacity, the successful candidate will discover, investigate, and document real-world exploitation and attacker infrastructure, transforming findings into enhancements for VulnCheck's detection capabilities.

Key Responsibilities

• Hunt for emerging exploitation activity and novel attacker behavior across VulnCheck's data
• Investigate exploitation attempts and develop methods for identifying similar activities at scale
• Build tooling and automation to support threat hunting and improve detection capabilities

Required Qualifications

• Demonstrated experience in threat hunting and analyzing attacker activity
• Ability to read and analyze PCAPs and understand network traffic and protocols
• Experience developing and tuning detection rules, including Suricata and/or Snort
• Strong programming or scripting skills with proficiency in multiple coding languages
• Experience working with Linux systems and internet-facing infrastructure