Principal Threat Hunter

This is a fully remote position, open to applicants in United States.

📋 Description

• Proactively evaluate, document, and report potential security incidents in client environments.

• Collaborate with internal teams and client partners regarding security threats, vulnerabilities, and exploits.

• Act as the primary point of contact and coordinator for clients during urgent security events that require a response, containment, and remediation.

• Lead, mentor, and develop threat hunters and analysts.

• Conduct security gap analyses and effectiveness assessments of technologies such as SIEM, SOAR, XDR, EDR, network security, web application security, asset management, and vulnerability scanning.

• Evaluate new security technologies to enhance client security programs and outcomes.

• Utilize OSINT and client data to illustrate adversary risk and formulate mitigation, detection, and policy recommendations.

• Work alongside senior and principal analysts to guide threat-hunting operations.

• Review security posture with multiple clients and suggest enhancements to their overall security strategy.

• Serve as a subject matter expert for internal teams and client counterparts.

• Create and maintain SOPs and knowledge bases that support content development, analyst responses, and client action items.

⛳️ Requirements

• Bachelor of Science or Master’s Degree in Cyber Security, Computer Science, Computer/software engineering, or a related field, along with 8+ years of experience in Incident Response, Blue Team, and/or Red Team technical operations.

• Equivalent education and training validated through certifications, performance evaluations, course diplomas, or official documentation may be acceptable.

• Certifications such as GCFA, GCIA, GREM, GCIH, CEH, OSCP, and other pertinent information security credentials.

• Leadership experience in developing personnel or operations while completing projects, tasks, and problem-solving.

• Proficient in 3 or more of the following: Incident response processes, Detection Engineering, Malware analysis, Network analysis, Threat intelligence reporting and analysis, Attack and Penetration Testing, Digital Forensics, or cyber threat emulation.

• Familiarity with Cyber threat methodologies, including the Cyber Kill Chain, Pyramid of Pain, MITRE ATT&CK Matrix, and Diamond Model, and their application in enterprise Cyber operations.

• Strong understanding of cybersecurity topics and current adversary TTPs.

• In-depth knowledge of Windows and Linux internals.

• A blend of skillsets in both offensive and defensive security practices.

• Demonstrated scripting abilities with Python, PowerShell, Bash, WMIC, or other programming languages.

• Experience with the threat hunting lifecycle and tool application.

• Expert-level proficiency in security tools such as CrowdStrike, CarbonBlack, Tanium, Splunk, Anomali, Sentinel, and Vectra.

• Advanced knowledge of tool integrations for data correlation and automation.

• Exceptional oral and written communication skills, including the ability to deliver clear and concise presentations to diverse audiences with an executive presence.

🏝️ Benefits

• A company dedicated to our inclusive values through Employee Resource Groups.

• Work/life balance.

• Access to professional training resources.

• Opportunities for creative problem-solving and addressing unique, complex projects.

• Volunteer opportunities through “Optiv Chips In.”

• The capability and technology necessary to work productively from home or remotely (where applicable).