Team Lead – Threat Hunting, Investigations

This is a fully remote position, open to applicants in Canada.

📋 Description

• Lead threat hunting, vulnerability management, ongoing penetration testing, and complex investigations.

• Develop structured methodologies for investigations and threat hunting.

• Ensure the quality of analyses and deliverables provided to both clients and leadership.

• Position the team as a premier technical center of expertise within the SOC.

• Guide the development of advanced analysts through coaching, knowledge sharing, and tailored training plans.

• Define and plan campaigns for threat hunting.

• Supervise the examination of client environments to identify weak signals, suspicious activities, and anomalous behaviors.

• Maintain tactical awareness of pertinent threats and integrate them into threat-hunting priorities.

• Oversee complex, critical, or high-impact investigations.

• Manage client support during significant incidents and incident response engagements.

• Supervise vulnerability management and ongoing penetration testing efforts.

• Establish priorities, scenarios, and validation objectives based on client risk assessments.

• Identify detection gaps and prioritize use cases in collaboration with the engineering team.

• Propose, validate, and document new detection rules based on the MITRE ATT&CK framework.

• Generate reports on investigations and threat hunting activities.

• Contribute to the internal knowledge base, advanced runbooks, and knowledge-sharing initiatives.

• Collaborate with Operations leads and the Engineering team.

• Participate in client security reviews and deliver presentations during workshops.

• Track recommendations through to successful implementation.

• Assist in the onboarding and training of new analysts.

⛳️ Requirements

• A minimum of 8 years of experience in a similar role.

• Proficiency in both French and English; this is a bilingual position.

• Background in threat hunting, advanced investigations, vulnerability management, and ongoing penetration testing.

• Experience in supervising teams and fostering the growth of advanced analysts.

• Ability to structure methodologies for investigations and threat hunting.

• Knowledge of TTPs, critical vulnerabilities, and cyber threat intelligence (CTI).

• Experience in reconstructing attack chains, including aspects of persistence, lateral movement, evasion, and impact assessment.

• Familiarity with the MITRE ATT&CK framework.

• Capability to produce comprehensive investigation and threat-hunting reports.

• Proficient in collaborating with Operations and Engineering teams.

• Experience in supporting clients during major incidents and incident response efforts.

🏝️ Benefits

• Permanent employment opportunity.

• Fully remote work arrangement.

• Bilingual French- and English-speaking position.

• Accessible and rewarding work environment.

• Applications from all qualified candidates are encouraged.

• Candidates from anywhere within the province of Quebec are invited to apply.