Senior Information Security Analyst (Threat Hunting)
Core
Lead proactive detection of advanced threats by actively searching for adversaries that evade traditional security controls across endpoints, networks, identities, and cloud environments.
Role type
Senior IC threat hunter
Builds
Improved detection rules, analytics, and alerts to close security gaps
Domain
Cybersecurity / Threat Intelligence
Required skills
Hypothesis-driven threat hunting, MITRE ATT&CK framework, SIEM platforms (Splunk, Elastic, QRadar), EDR/XDR platforms (Microsoft Defender, CrowdStrike, SentinelOne), Windows internals, Linux systems, Active Directory, network traffic analysis, cloud attack techniques (Azure/AWS/GCP), Python/PowerShell/Bash scripting
Preferred skills
GCFE, GCIA, GCFA certifications, experience with detection engineering, SOC, IR, red team, and threat intelligence functions
Technologies
Splunk, Elastic, QRadar, Microsoft Defender, CrowdStrike, SentinelOne, Python, PowerShell, Bash, KQL, SPL, Lucene, SQL
Responsibilities
Conduct proactive, hypothesis-driven threat hunting across endpoint, network, identity, cloud, and application telemetry; Develop and execute hunt scenarios based on threat intelligence and MITRE ATT&CK techniques; Analyze large datasets from SIEM, EDR/XDR, NDR, identity platforms, and cloud logs to uncover anomalous or malicious activity; Identify detection gaps and collaborate with detection engineering teams to create or improve rules, analytics, and alerts; Investigate low-fidelity or weak signals that fall below traditional alert thresholds; Leverage scripting and automation to accelerate hunts, data enrichment, and large-scale analysis; Collaborate with incident response teams during active investigations to provide deep technical analysis and attacker context; Validate and refine hypotheses through iterative testing, purple team exercises, and adversary emulation activities; Document hunt methodologies, findings, assumptions, and lessons learned in a structured and repeatable manner; Continuously research emerging threats, tools, techniques, and attack campaigns relevant to the environment.
Seniority
Senior, hands-on IC
