Senior Cybersecurity Threat Hunter
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Senior Cybersecurity Threat Hunter leading proactive threat detection at Uni Systems. Managing hunting campaigns, telemetry analysis, detection engineering, incident response support, and threat-informed security improvements.
Responsibilities:
- Lead and manage the threat hunting program, including campaign planning, prioritization, execution, and reporting.
- Conduct threat research, develop hunting hypotheses, and identify detection gaps to improve security monitoring.
- Analyze security telemetry from SIEM, EDR, data lakes, and other sources to identify advanced threats.
- Develop and enhance threat detection use cases, detection models, and engineering frameworks (e.g., OpenTIDE).
- Design, automate, and maintain threat hunting workflows, playbooks, integrations, and IoC retro-hunting capabilities.
- Support incident response investigations, purple team exercises, and validation of new detection capabilities.
- Collaborate with Incident Response, Threat Detection, Threat Intelligence, Malware Analysis, Red/Purple Teams, and external partners (e.g., CERT-EU).
- Prepare executive briefings, campaign reports, and investigation summaries for senior management.
- Mentor and train junior threat hunters while promoting threat-informed detection practices.
- Continuously improve detection coverage by incorporating lessons learned from incidents, red teaming, and threat intelligence.
Requirements:
- Master's Degree in Computer Science, with a focus on Cybersecurity.
- Minimum 2 years of experience leading Threat Hunting activities in a SOC/CSOC or equivalent environment.
- Proven experience in operationalising threat intelligence to support proactive hunting and detection engineering.
- Proven experience in developing and improving detection coverage to convert intelligence-driven priorities into timely and relevant detection use cases aligned with CSOC operational needs.
- Hands-on experience with OpenTIDE or an equivalent detection content management platform.
- Strong practical experience with SIEM platforms, particularly Splunk Enterprise Security and Risk-Based Alerting, or equivalent technologies, for detection engineering, alerting, and use case development.
- Strong practical experience with EDR solutions.
- Ability to produce clear, structured, and actionable reporting, including threat assessments and strategic or operational reports, for technical and non-technical audiences.
- Strong coordination skills with internal teams, business representatives, and external partners.
Similar Jobs
Exposure Intelligence Analyst – Databases, Data Stores, RDBMS, NoSQL, Object Storage, Permissions
Exposure Intelligence Analyst securing Allstate’s databases, cloud data stores, and permissions. Identifying exploitable access paths and guiding remediation to reduce enterprise data exposure.
Intelligence Analyst
Intelligence Analyst supporting cyber threat customers and ensuring value realization from purchased Intelligence products at CrowdStrike.
Senior Cyber Threat Analyst
Senior Cyber Threat Analyst at Harbor IT investigating complex security incidents and communicating findings with clients. Collaborating with SOC analysts and providing escalation support.
Cyber Intelligence Analyst
Cyber Intelligence Analyst at UPS participating in threat identification and mitigation efforts. Provide support on a rotating basis, ensuring client understanding of security protocols and events documentation.
Cyber Threat Hunter
Cyber Threat Hunter protecting systems from cyber threats at a global insurance and asset management company. Utilizing automation and machine learning for scalable detection of anomalies and threats.
Exposure Intelligence Analyst – Endpoint & Identity, EDR, AD-Entra, PAM, MFA
Exposure Intelligence Analyst at Allstate identifying and prioritizing risks in endpoint and identity systems. Collaborating with teams to enhance security posture and mitigate vulnerabilities.
Exposure Intelligence Analyst – Cloud Platforms, AWS, Azure, GCP, Cloud Posture
Lead Consultant for cloud platforms securing cloud environments at Allstate. Identifying exploitable risks across AWS, Azure, and GCP while ensuring risk prioritization and remediation strategies.
Senior Data Intelligence Analyst – Health Equity
Senior Data Intelligence Analyst analyzing healthcare-related data to support enterprise intelligence projects. Collaborating on reporting, analysis, and strategy with a focus on health equity.
Senior Intelligence Analyst, GTAC Vulnerability Mission
Senior Intelligence Analyst for CrowdStrike tracking vulnerabilities and exploit trends in cybersecurity. Collaborating with teams to produce intelligence analysis and support adversary understanding.
Threat Hunter
Threat Hunter for Teleport's Defense and Intelligence team. Developing strategies to find active threats and strengthen security in cloud environments.
Analista de Inteligência de Mercado
Analista de Inteligência de Mercado em empresa farmacêutica com mais de 65 anos no mercado. Foco em análise e estratégias de informação para as áreas de negócio.
Embedded Intelligence Analyst
Intelligence Analyst supporting a 24/7 security operation, identifying threats and trends. Working remotely for Sibylline, a strategic risk consultancy in the security sector.
Senior Data Intelligence Analyst
Senior Data Intelligence Analyst transforming data into actionable insights for strategic decisions at RD Station. Leading complex analytical projects and mentoring team members to elevate skills.
Intelligence Analyst – Digital Risk Monitoring
Intelligence Analyst on CrowdStrike's CAO Elite team focusing on digital risk monitoring. Collaborating with customers to tailor threat intelligence and improve cyber defenses.
Intelligence and Performance Analyst
Analista de Inteligência e Performance at Wiz Co, specializing in data analysis, visualization, and collaboration with engineering teams. Ensuring data quality and providing actionable insights to drive business decisions.
Fraud Intelligence Analyst
Fraud Intelligence Analyst analyzing fraud cases and collaborating with Product and Data Science teams. Building expertise in fraud and influencing product development and revenue workflows.
No more related jobs available.