Senior Threat Hunter

This is a fully remote position, open to applicants in United States.

📋 Description

• Guide and enhance advanced threat hunting tactics and strategies for global clients and international organizations.

• Oversee technically intricate client projects involving emerging technologies and cybersecurity protections in enterprise networks, including OT, IoT, and LLM environments.

• Provide guidance to customers on the integration, identification, and testing of AI agentic capabilities within cybersecurity enterprises.

• Collaborate with the range operations team to create toolsets and cyber threat scenarios that model real-world defense situations.

• Set up parsing rules, dashboards, and tuning for enterprise security tools within the cyber range platform.

• Present instructional materials on complex cybersecurity concepts.

• Create tests aimed at developing AI agents and models.

• Conduct cyber defense exercises for SimSpace and its clients.

• Educate on security concepts and show practical applications of both open-source and commercial security tools.

• Reference both established and innovative incident response techniques to defend networks against advanced threats.

• Lead projects, take initiative in day-to-day tasks, and mentor team members.

• Navigate a multifaceted, geographically dispersed organization and foster consensus across competing priorities.

• Support customer security team assessments and events, with travel expected to be up to 25%.

⛳️ Requirements

• Proven experience generating original cyber threat research and crafting successful proposals for conference training and engagements.

• Strong understanding of AI agents, including the orchestration of agent decision loops, tool access frameworks, and memory systems optimized for threat hunting and proactive security operations.

• Direct experience in conducting threat hunting within active corporate environments.

• Over 6 years of experience in Security Operations, Incident Response, Detection Engineering, Offensive Security/Red Team, or Cyber Threat Intelligence.

• Familiarity with analyzing host, network, and application telemetry for indicators of attack across the cyber kill chain.

• Proficient in handling very large datasets and log analysis tools such as Splunk, Elastic, Python, Pandas, SQL, Hadoop, and Hue.

• Capability to consume and analyze Cyber Threat Intelligence for actionable insights.

• Ability to apply Cyber Threat Intelligence through enrichment, correlation, and attribution.

• Experience in setting up and/or troubleshooting security stacks.

• Understanding of offensive security strategies and assessment methodologies.

• Experience in articulating threat hunt objectives to both technical and non-technical audiences while communicating associated risks.

• Hands-on experience in detecting indicators of compromise using enterprise-scale EDR and SIEM tools, including Splunk, Elastic, and CrowdStrike.

• Prior experience in digital forensics or incident response related to significant security incidents.

• Proven self-starter with a commitment to helping others improve and develop the team.

• Proof of eligibility to work in the United States is required at the time of hire.

🏝️ Benefits

• Annual bonuses linked to company performance and individual contributions.

• Comprehensive medical, dental, and vision benefits.

• Savings plans.

• Company-paid counseling, coaching, and family resources through Spring Health.

• 401(k) retirement savings plan with company matching.

• Flexible vacation, company holidays, and designated health & wellness days.

• Paid parental leave.

• Equity stock options upon hire, with additional performance-based grants each year.

• Full- and partial-subsidized Peloton membership plans and equipment discounts.

• LinkedIn Learning membership.

• Monthly reimbursements for meaningful connections with colleagues through the SocialSpace Community.

• Legal plan coverage.

• Pet insurance.

• Wellness reimbursements.

• Remote work arrangements.