Principal Threat Hunter (Cybersecurity)

Location: Fully remote within the continental United States; shift flexibility is required, including rotation between days, mids, and nights, to support 24/7 operations.

Company

hirify.global provides cybersecurity services and solutions that help clients secure their businesses, systems, networks, and assets.

What you will do

• Analyze, document, and report potential security incidents in client environments.
• Coordinate urgent client security events requiring response, containment, and remediation.
• Assess security gaps and the effectiveness of SIEM, SOAR, XDR, EDR, firewalls, IDS/IPS, web application security, asset management, and vulnerability-scanning technologies.
• Apply OSINT and client data to demonstrate adversary risk, improve detection content, and recommend mitigation techniques and policy changes.
• Develop SOPs and knowledge bases supporting content development, analyst response, and client action items.
• Lead, mentor, and influence threat hunters, analysts, internal teams, and client counterparts.

Requirements

• Bachelor’s or master’s degree in cybersecurity, computer science, computer/software engineering, or a related field combined with 8+ years of experience in incident response, Blue Team, and/or Red Team technical operations; equivalent documented education and training may qualify.
• Leadership experience developing people or operations and completing projects, tasks, and problem-solving activities.
• Experience in at least 3 of the following: incident response processes, detection engineering, malware analysis, network analysis, threat intelligence reporting and analysis, attack and penetration testing, digital forensics, or cyber threat emulation.
• Experience applying the Cyber Kill Chain, Pyramid of Pain, MITRE ATT&CK Matrix, and Diamond Model to enterprise cyber operations.
• Strong understanding of cybersecurity topics, current adversary TTPs, and Windows and Linux internals.
• Combined offensive and defensive security capabilities.
• Proven scripting experience with Python, PowerShell, Bash, WMIC, or other languages.
• Experience with the threat-hunting lifecycle and its tools.
• Expert knowledge of security tools and tool integrations for data correlation and automation, including platforms such as CrowdStrike, CarbonBlack, Tanium, Splunk, Anomali, Sentinel, and Vectra.
• Excellent oral and written communication skills, including clear, concise presentations to varied audiences and executive presence.

Nice to have

• GCFA, GCIA, GREM, GCIH, CEH, OSCP, or other relevant information-security certifications.

Culture & Benefits

• Remote-work technology and resources to support productive work from home.
• Professional training resources, work/life balance, and opportunities for creative problem-solving on complex projects.
• Inclusive employee resource groups and volunteer opportunities through hirify.global Chips In.
• Full-time employment in a 24/7 support environment with rotating shifts between days, mids, and nights.