Threat Hunting Team Lead (Cyber Security)
Core
Leading a proactive threat hunting program to identify advanced threats, adversary activity, and security gaps across corporate IT, cloud platforms, and data center infrastructure.
Role type
Senior IC Threat Hunting Team Lead
Builds
Proactive threat hunting capabilities, detection methodologies, and automated security controls
Domain
Cyber Security / Cloud Infrastructure
Required skills
Threat hunting, incident response, detection engineering, MITRE ATT&CK, adversary TTPs, EDR/XDR, SIEM, cloud security, scripting/querying (KQL, SPL, SQL, Python, PowerShell), APT investigation, ransomware analysis, cloud attack analysis
Preferred skills
AWS/GCP/Azure hunting, large-scale enterprise/AI infrastructure, detection rule development, behavioral analytics, malware analysis, digital forensics, reverse engineering, threat intelligence platforms
Technologies
MITRE ATT&CK, EDR/XDR, SIEM, KQL, SPL, SQL, Python, PowerShell, AWS, GCP, Azure
Responsibilities
Lead and manage the Threat Hunting team including mentoring and professional development; Define and execute proactive threat hunting strategy; Conduct hypothesis-driven hunting to identify advanced threats and persistence mechanisms; Develop and improve hunting methodologies and playbooks; Leverage threat intelligence and adversary TTPs to drive campaigns; Hunt across endpoint, identity, network, cloud, and application telemetry; Collaborate with SOC and Incident Response to validate findings and improve response; Partner with Detection Engineering to automate detections; Identify security gaps with Infrastructure teams; Produce technical reports and threat assessments; Define KPIs to measure program maturity; Stay current on emerging threats and AI-driven attack techniques
Seniority
Senior, hands-on IC with team leadership
