Threat Hunter

Job Summary

Proactively identifying and investigating advanced threats, the fully remote Threat Hunter will conduct threat hunting activities, create and optimize SPL queries within Splunk, and analyze security telemetry to enhance the organization's defenses.

Key responsibilities:

• Conduct proactive threat hunting activities across enterprise environments to identify malicious activity and indicators of compromise
• Create and optimize SPL queries from scratch within Splunk or a comparable SIEM platform to enhance threat detection
• Investigate anomalous events, user activity, and potential security incidents utilizing SIEM and UEBA/UBA technologies

Required qualifications:

• 4+ years of experience in threat hunting, incident response, security operations, or a related cybersecurity function
• Hands-on experience with Splunk or another SIEM platform, including building SPL queries from scratch
• Strong understanding of networking concepts, systems administration, and enterprise infrastructure
• Experience working with UEBA or UBA platforms to identify suspicious user and entity behavior
• Prior experience as a Systems Engineer, Network Engineer, or similarly technical infrastructure-focused role is highly preferred