Lead Threat Detection & Threat Hunting Engineer (Cybersecurity)

Location: Hybrid, Richmond, Virginia, United States

Base compensation: $118,400–$219,800 USD annually; eligible roles may also receive an annual bonus.

Company

hirify.global provides trusted content, software, data, and insights for legal, tax, accounting, compliance, government, and media professionals.

What you will do

• Architect, develop, tune, validate, and maintain scalable threat detection logic across Splunk, AWS, Azure, endpoint, identity, network, and other enterprise data sources.
• Conduct hypothesis-driven threat hunts based on adversary tactics, threat intelligence, emerging threats, environmental changes, and defensive coverage gaps.
• Build detection workflows, enrichment pipelines, correlation logic, and automation with Splunk, Torq, and related security technologies.
• Map detection coverage to MITRE ATT&CK, identify telemetry and tooling gaps, and improve logging, data quality, normalization, and enrichment.
• Evaluate detection performance through testing, threat simulations, purple-team exercises, incident findings, false-positive analysis, and operational metrics.
• Partner with Security Operations, Incident Response, Security Engineering, Cloud Engineering, and platform teams; mentor junior detection engineers and threat hunters.

Requirements

• 5+ years of experience in threat detection engineering, threat hunting, security analytics engineering, cyber defence, threat intelligence, or a related cybersecurity discipline.
• Experience developing, tuning, validating, and maintaining detection logic across multiple security platforms, including SIEM, EDR, cloud-native security tools, or similar technologies.
• Strong hands-on experience with Splunk searches, correlation logic, dashboards, detections, or related security analytics content.
• Experience conducting proactive, hypothesis-driven hunts and analyzing endpoint, identity, network, cloud, application, infrastructure, security log, telemetry, behavioral, and event data.
• Deep understanding of adversary tactics, techniques, and procedures; ability to translate threat intelligence, indicators of compromise, behavioral indicators, and adversary tradecraft into detection and hunting use cases.
• Strong proficiency with MITRE ATT&CK, including detection mapping, coverage analysis, and defensive or telemetry gap identification.
• Experience with AWS and/or Azure security telemetry and cloud detection or threat-hunting use cases.
• Experience scripting or automating workflows with Python, PowerShell, SPL, KQL, SQL, or comparable languages.
• Strong communication and technical leadership skills, including mentoring team members or leading cross-functional security initiatives.

Nice to have

• Experience with Torq or comparable SOAR, security automation, and orchestration platforms.
• Experience with AWS, Azure, GCP, or hybrid cloud environments and cloud-native security services.
• Experience with SIEM, EDR, SOAR, XDR, cloud, identity, network security, or threat intelligence platforms.
• Experience with threat hunting, purple-team exercises, adversary simulation, red-team detection analysis, breach-and-attack simulation, or detection validation.
• Experience with detection-as-code, content lifecycle processes, automated testing frameworks, CI/CD pipelines, security data integration, and enrichment pipelines.
• Familiarity with AI-enabled security operations, detection engineering, threat intelligence, threat-hunting, or investigation tools.
• Relevant certifications such as GCIA, GCTI, GCED, GCIH, OSCP, AWS Security Specialty, or Azure Security Engineer.

Culture & Benefits

• Flexible hybrid work model for office-based roles.
• Work from anywhere is available for up to 8 weeks per year.
• Benefits include health, dental, vision, disability, life insurance, retirement savings with 401(k) match, paid vacation, sick and safe time, holidays, parental leave, and sabbatical leave.
• Additional support includes tuition reimbursement, mental health resources, wellness benefits, flexible spending and health savings accounts, commuter benefits, and employee assistance programs.
• Employees receive two paid volunteer days annually and access to social-impact and pro-bono initiatives.