Lead Threat Detection & Threat Hunting Engineer

What you'll do

• Build, tune, validate, and maintain detection logic and hunting workflows across security data sources.
• Conduct hypothesis-driven threat hunts and use MITRE ATT&CK and threat intelligence to identify coverage gaps and prioritize improvements.
• Develop security automation, evaluate detection performance, document standards, and mentor junior team members.

What they ask for

• 5+ years in threat detection engineering, threat hunting, security analytics engineering, cyber defence, threat intelligence, or a related cybersecurity discipline.
• Demonstrated experience developing, tuning, validating, and maintaining detection logic across multiple security platforms.
• Strong hands-on experience with Splunk, including searches, correlation logic, dashboards, detections, or related security analytics content.
• Experience with proactive threat hunts, security telemetry analysis, MITRE ATT&CK, and AWS and/or Azure security telemetry.

Nice to have

• Experience with Torq or comparable SOAR, security automation, and orchestration platforms.
• Familiarity with AI-enabled security operations, detection engineering, threat intelligence, threat-hunting, or investigation tools.

Pay

$118,400 USD - $219,800 USD (base compensation range)

Tools

Splunk, Torq, AWS, Azure, MITRE ATT&CK, Python, PowerShell, KQL

AI focus

Uses AI-enabled security and automation tools to accelerate detection development, threat hunting, research, telemetry analysis, documentation, and workflow development; validates outputs before operational use and may evaluate new AI-enabled tools.