Threat Hunter

Job Summary

Proactively identifying and investigating advanced threats, the full-time Threat Hunter will conduct threat hunting activities, create and optimize SPL queries, and analyze security telemetry in a fully remote environment.

Key responsibilities

• Conduct proactive threat hunting activities across enterprise environments to identify malicious activity and indicators of compromise
• Create and optimize SPL queries from scratch within Splunk or a comparable SIEM platform to enhance threat detection
• Investigate anomalous events, user activity, and potential security incidents utilizing SIEM and UEBA/UBA technologies

Required qualifications

• 4+ years of experience in threat hunting, incident response, security operations, or a related cybersecurity function
• Hands-on experience with Splunk or another SIEM platform, including building SPL queries from scratch
• Strong understanding of networking concepts, systems administration, and enterprise infrastructure
• Experience working with UEBA or UBA platforms to identify suspicious user and entity behavior
• Prior experience as a Systems Engineer, Network Engineer, or similarly technical infrastructure-focused role is highly preferred