Principal Threat Hunter (Unit 42)
Core
Proactive, intelligence-led threat hunting across large-scale customer telemetry to identify adversary behavior and validate emerging threats.
Role type
Principal Threat Intelligence Hunter (IC)
Builds
Actionable hunting hypotheses, investigation workflows, hunting queries, and customer-facing findings for multinational organizations.
Domain
Cybersecurity / Threat Intelligence / Managed Security Services
Required skills
Tactical threat hunting, Cyber threat intelligence (CTI), DFIR, Adversary behavior analysis, Telemetry analysis (endpoint, network, cloud, identity), Incident data modeling, Technical reporting, Hunting hypothesis development, Log-based query development
Preferred skills
Incident Response experience, Managed Services experience, Python, SQL, Malware analysis, Security research publication
Technologies
Unit 42 telemetry, Endpoint, Network, Cloud, Identity, Malware analysis tools
Responsibilities
Analyze public and private threat intelligence and adversary campaigns to generate hunting hypotheses. Execute threat hunting reports and investigate suspicious activity in customer telemetry. Translate intelligence into detection logic and log-based queries. Compose professional reports on investigation results and emerging threats. Collaborate with detection engineers, incident responders, and researchers to operationalize intelligence. Escalate high-impact security events to leadership.
Seniority
Principal, hands-on IC with strategic impact
