Want to know if you’re a fit?
Upload your resume and let our AI show you.
Skills
Analysis Skillsunmatched
Automationunmatched
CISSP - Certified Information Systems Security Professionalunmatched
Campaignsunmatched
Computer Telephony Integration (CTI)unmatched
Cyber Threat Huntingunmatched
Emerging Technologyunmatched
GCFA - GIAC Certified Forensic Analystunmatched
GCIH - GIAC Certified Incident Handlerunmatched
Huntingunmatched
Incident Responseunmatched
Intelligence Analysisunmatched
Internet Securityunmatched
Malwareunmatched
Malware Analysisunmatched
Operational Strategyunmatched
Operational Supportunmatched
Riskunmatched
Security Attacksunmatched
Security Information and Event Management (SIEM)unmatched
Splunkunmatched
Technical Leadershipunmatched
Technical Presentationunmatched
Telemetryunmatched
Description
Position TitleCyber Threat Intelligence & Threat Hunting Lead
Position OverviewThe Cyber Threat Intelligence & Threat Hunting Lead will oversee integrated cyber threat intelligence (CTI), detection engineering, and proactive threat hunting operations supporting enterprise cyber defense missions.The Lead will drive development of intelligence-driven detections, hunt methodologies, adversary tracking, SIEM content engineering, and operational threat-informed defense capabilities.
Key Responsibilities- Lead CTI, detection engineering, and threat hunting operations.
- Develop intelligence-driven detection and hunt strategies.
- Produce operational and strategic threat intelligence reporting.
- Develop and maintain:
- SIEM detections,
- analytics,
- correlation rules,
- behavioral detections,
- and hunt playbooks.
- Conduct hypothesis-based threat hunting aligned to:
- MITRE ATT&CK,
- adversary TTPs,
- malware campaigns,
- and emerging threats.
- Integrate CTI into SOC workflows, detection engineering, and incident response operations.
- Analyze:
- malware trends,
- adversary infrastructure,
- campaigns,
- indicators,
- and attack patterns.
- Support automation and SOAR integration initiatives.
- Brief executives and technical leadership on emerging threats and operational risk.
Required Qualifications- 10+ years of cybersecurity operations experience.
- 5+ years supporting CTI, threat hunting, or detection engineering programs.
- Experience with:
- Splunk,
- Sentinel,
- CrowdStrike,
- EDR telemetry,
- detection content engineering,
- and intelligence platforms.
- Strong understanding of:
- MITRE ATT&CK,
- adversary tradecraft,
- malware analysis,
- and intelligence analysis methodologies.
- Experience developing:
- SIEM detections,
- hunt analytics,
- detection tuning,
- and operational reporting.
Preferred Certifications- GCTI
- GCFA
- GCIH
- GMON
- GCDA
- CISSP
- Splunk Security certifications
Powered by JazzHR