Threat Hunting Researcher

This is a fully remote position, open to applicants in California.

📋 Description

• Oversee essential threat hunting operations

• Collaborate with and advise clients on urgent hunting-related inquiries and suspected security incidents

• Implement threat hunting reports and workflows, analyze results, and assist in timely reporting to customers

• Investigate hunting leads based on Indicators of Compromise (IOCs), threat intelligence, and internal detections

• Monitor the threat landscape and prepare initial context for emerging campaigns

• Elevate significant or high-impact security events to leadership

• Assist the Managed Detection and Response (MDR) team with hunting-related tasks

• Provide continuous feedback on findings, reports, queries, and workflows for ongoing improvement

⛳️ Requirements

• A minimum of 3 years of relevant cybersecurity experience in threat hunting, incident investigation, SOC analysis, detection engineering, DFIR, or MDR

• Strong comprehension of the evolving threat landscape, attack tools, tactics, techniques, and networking/security fundamentals

• Experience in investigating suspicious activities, security incidents, or targeted threats across endpoints, networks, identity, and cloud

• Capability to work autonomously, make sound investigative decisions, and escalate findings that require further review

• Experience managing customer-facing security requests, including clear written communication, investigation summaries, and recommendations

• Understanding of attacker behaviors, including attack vectors, execution, persistence, privilege escalation, lateral movement, and exfiltration

• Background in writing, modifying, or executing detections, hunting queries, or log-based inquiries

• Familiarity with organizational cybersecurity measures, including protective tools, response actions, and remediation techniques

• Exceptional written and verbal communication skills in English, with a strong focus on detail for documenting investigation logic

• Experience in an Incident Response environment

• Proficiency in Python and SQL

• Familiarity with malware analysis

• Experience in writing technical reports, investigation summaries, or customer-oriented security analyses

• Ability to analyze and comprehend the infrastructure, behaviors, and objectives of malicious campaigns

• Must not require immigration sponsorship; the employer will not provide work visa sponsorship for this role

🏝️ Benefits

• Restricted stock units may be included

• Bonus may be included

• Reasonable accommodations for qualified individuals with a disability or special need