Cybersecurity Threat Hunter

This is a fully remote position, open to applicants in Texas.

📋 Description

• Monitor emerging techniques utilized by threat actors through recent research, threat intelligence reports, and direct observations, evaluating their relevance to client environments.

• Create original research based on identified malware and threat actor TTPs, including the extraction of IOCs and opportunities for detection.

• Develop and optimize client-facing threat hunting queries across customer EDR and SIEM platforms.

• Act as a technical liaison for clients, conveying findings from hunts, methodologies, and recommendations.

• Conduct static and dynamic malware analysis to comprehend malicious activities, execution patterns, and evasion tactics.

• Examine telemetry, logs, and alerts across various operating systems including Windows, Linux, and macOS.

• Collaborate with Threat Hunters and SOC analysts on investigations and technical discoveries.

• Stay updated on threat actor tactics and advancements in cybersecurity.

• Guide and mentor junior team members.

• Generate weekly client deliverables and seek opportunities to publish research through blog posts or security conferences.

⛳️ Requirements

• Practical experience in hunting threat actor activities using EDR and/or SIEM platforms such as Microsoft Sentinel, Splunk, and CrowdStrike.

• Proficient in developing and optimizing hunting and detection queries using platform-specific languages, including KQL and SPL.

• Strong written and verbal communication skills for articulating technical findings to clients and team members.

• Familiarity with threat actor techniques, evasion strategies, and the current threat landscape.

• Experience in transforming threat intelligence into actionable hunt and detection logic.

• Knowledge of malware analysis methods and the ability to interpret and apply findings effectively.

• Experience in network traffic analysis.

• Proficiency in Windows environments, with working knowledge of Linux and macOS.

• Exceptional research and technical analysis skills.

• Strong problem-solving, interpersonal, organizational, and attention-to-detail abilities.

• An associate's degree in Computer Science, Information Security, Incident Response, Forensics, or a related field, or 2 or more years of relevant hands-on experience.

• Preferred: a bachelor's or master's degree, or 4 or more years of relevant hands-on experience.

• Preferred: 2 or more years of experience in threat hunting, detection engineering, incident response, or a SOC role.

• Preferred: experience in script analysis/de-obfuscation, scripting or programming, original research publication, malware reverse engineering, digital forensics and incident response, and mentoring.

🏝️ Benefits

• Competitive medical, dental, and vision coverage for employees and their dependents.

• 401k match with immediate vesting for every payroll.

• A flexible and remote-friendly work environment.

• Opportunities for training to enhance your skill set.

• Attractive perks.