Threat Hunting Engineer (Cybersecurity)

TL;DR

Threat Hunting Engineer (Cybersecurity): Designing and executing adversary pursuit campaigns and maturing threat hunting capabilities across cloud and IoT environments with an accent on detection engineering and incident response. Focus on identifying complex cybersecurity threats, optimizing visibility, and bridging offensive testing with defensive posture.

Location: Remote (USA). Candidates in Atlanta and Boston are prioritized.

Salary: $140,000 – $175,000 + Equity

Company

Flock builds technology to enhance community safety, supporting millions of criminal investigations through a massive network of hardware devices and cloud platforms.

What you will do

• Lead end-to-end threat hunting campaigns across cloud environments, IoT hardware, and corporate applications.
• Partner with the Offensive Security team to validate custom detection rules mapped to the MITRE ATT&CK framework.
• Design and execute technical and tabletop exercises to test incident response readiness.
• Serve as a technical escalation point for root cause analysis and mentor junior engineers.
• Integrate security automation platforms and intelligent workflows to accelerate operational response.

Requirements

• Proven experience in digital forensics, incident response, and threat hunting across cloud, enterprise, and IoT environments.
• Hands-on expertise in authoring detection rules using Splunk SPL, YARA, or Sigma.
• Practical capability in security automation, malware analysis, or sandboxing technologies.
• Deep understanding of cyber threat intelligence frameworks, MITRE ATT&CK, and technical threat modeling.
• Must be based in the USA.

Culture & Benefits

• Competitive base salary and Flock Stock Options.
• Opportunity to work in a high-stakes, fast-paced environment with real-world impact on public safety.
• Inclusive culture that values diverse perspectives and mutual respect.