Principal Threat Hunter (23)

Summary

Serving as a senior technical leader within the Cyber Defense Team, the full-time Principal Threat Hunter will design and execute proactive threat hunts across cloud and SaaS environments, lead complex investigations, and drive threat intelligence initiatives while working remotely.Key responsibilitiesDesign and execute proactive threat hunts based on current intelligence and adversary behaviorLead incident response investigations and serve as Incident Commander when requiredMature and operate a threat intelligence reporting function to create hunt leads and detection opportunitiesRequired qualifications5+ years of experience in a security operations role focused on threat hunting and/or threat intelligenceProven experience in building or contributing to a structured threat hunting or threat intelligence programIncident response experience with the ability to lead investigations independentlyWorking knowledge of cloud and SaaS environments (AWS, Azure, GCP, Okta, M365)Hands-on experience with automation or AI tooling in security operations

Job Description

Serving as a senior technical leader within the Cyber Defense Team, the full-time Principal Threat Hunter will design and execute proactive threat hunts across cloud and SaaS environments, lead complex investigations, and drive threat intelligence initiatives while working remotely.Key responsibilitiesDesign and execute proactive threat hunts based on current intelligence and adversary behaviorLead incident response investigations and serve as Incident Commander when requiredMature and operate a threat intelligence reporting function to create hunt leads and detection opportunitiesRequired qualifications5+ years of experience in a security operations role focused on threat hunting and/or threat intelligenceProven experience in building or contributing to a structured threat hunting or threat intelligence programIncident response experience with the ability to lead investigations independentlyWorking knowledge of cloud and SaaS environments (AWS, Azure, GCP, Okta, M365)Hands-on experience with automation or AI tooling in security operations