Threat Hunter

Overview

Connecting clients to markets – and talent to opportunity

Business Segment

Responsibilities

Position Purpose

Key Responsibilities

Program Leadership & Strategy

• Conduct proactive threat hunting across endpoints, networks, and cloud environments to identify malicious activity, abnormal behaviors, and emerging attacker techniques.
• Lead complex investigation escalated from L1/L2 SOC teams, providing expert analysis and resolution guidance.
• Develop, test, and deploy advanced detections aligned with MITRE ATT&CK and other frameworks
• Collaborate with Threat Intelligence teams to operationalize intel into hunting hypotheses and detection rules.
• Perform root cause analysis and propose long-term defensive improvements
• Create and maintain documentation, playbooks, and hunt reports to improve SOC maturity
• Mentor and upskill L1/L2 analysts, building a knowledge-sharing culture within the SOC
• Act as point of escalation during incidents, providing expert guidance and coordination
• Participate in re/blue/purple team exercises and integrate lessons learned into detection strategies.
  

Qualifications

To land this role:

Qualifications Required

• 5-8 years of experience in SOC, incident response, or dedicated threat hunting
• Strong expertise in EDR, SIEM, and SOAR platforms
• Deep understanding of Windows, Linux, and Cloud internals for detection and forensics
• Proven ability to operationalize MITRE into detection and hunting activities
• Proficiency with scripting, querying (e.g. Python, PowerShell, KQL)
• Excellent analytical and problem solving skills with the ability to think like an attacker
• Stong communication skills to document finding and present results to technical and executive audiences.
  

Nice to have

• Experience with threat intelligence analysis and integrating intel into hunt operations
• Familiarity with reverse engineering malware or analyzing exploits
• Prior mentoring or leadership experience within SOC teams