Senior Capabilities Hunter
$152,000–$152,000 year
RemoteUnited States
Job Summary
Develop and maintain tools for capability identification, analyzing adversary tactics, techniques, and procedures across threat groups to inform detection strategies and customer advisories. Hunt for emerging threat actor arsenals using Synapse, Storm Query Language, and intelligence platforms like NetFlow and VirusTotal to support WorldView reporting and incident response engagements. Uphold technical excellence through robust code and independent problem-solving while identifying automation opportunities for telemetry gaps. Represent the team in external communications and collaborate cross-functionally to enhance defenses against advanced attacks on critical infrastructure globally.
Required Qualifications
- 2–3 years of experience in Capabilities Development, Threat Hunting, Network-Based Intrusion Analysis, Vulnerability Analysis, and/or Detections Development
- Experience with software development in C#, Python, or similar languages
- Familiarity with pivoting across the Diamond Model, all stages of the Kill Chain, and MITRE ATT&CK
- Strong report writing skills, with experience producing technical intelligence reports for operational teams and customer-facing audiences
- Demonstrated knowledge of adversarial Threat Groups, including tactics, techniques, procedures, and the adversary lifecycle
- Experience contributing to cross-functional projects and collaborating with internal and external teams
- Knowledge of network analysis and common malware functionality and operations
- All new hires must pass a background check as a condition of employment
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.