Cyber Security Threat Hunter

Jobtailor; North Carolina; On-site; USD 90,000 - 120,000; Full time

Job summary

Jobtailor is seeking an Information Security professional in the United States to proactively hunt threats, analyze alerts and logs, and perform vulnerability assessments and penetration testing. The role collaborates with SOC teams and focuses on MITRE ATT&CK-aligned security use cases while prioritizing remediation with infrastructure, cloud, and security teams.

Qualified candidates will have a Bachelor's degree in a related field, 3 years of information security experience, hands-on

Qualifications

• Bachelor's degree in IT Security, Computer Science, Engineering, or related field
• 3 years of Information Security experience
• Strong hands-on experience with SIEM platforms, IDS/IPS, and endpoint security tools
• Experience in vulnerability management, penetration testing, and threat hunting methodologies
• Ability to analyze network traffic, logs, and security events to identify potential threats
• Working knowledge of intrusion detection techniques, incident response, and digital forensics
• Familiarity with cloud security concepts and AWS core services
• Strong understanding of regulatory frameworks such as NIST, ISO, PCI-DSS, and data privacy standards
• Excellent analytical, problem-solving, and communication skills
• Relevant certifications such as CISSP, GIAC, CCSP, CCSK, or AWS certifications

Responsibilities

• Proactively hunt for threats using SIEM, IDS/IPS, and threat intelligence to identify indicators of compromise and anomalous behavior
• Analyze security alerts, logs, and telemetry data to detect emerging attack patterns and support incident investigations
• Perform vulnerability assessments and penetration testing to identify weaknesses and validate exploitability
• Collaborate with SOC teams to refine alerting logic and improve incident response workflows
• Develop and enhance security use cases aligned to the MITRE ATT&CK framework
• Partner with infrastructure, cloud, and security teams to prioritize remediation efforts based on risk and business impact

Skills

Threat hunting

Incident response

Vulnerability assessments

Log analysis

Regulatory compliance

Education

Bachelor's in IT Security/CS/Engineering

Tools

SIEM platforms

IDS/IPS

Endpoint security tools

Threat intelligence

Job description

Responsibilities

• Proactively hunt for threats using SIEM, IDS/IPS, and threat intelligence to identify indicators of compromise and anomalous behavior
• Analyze security alerts, logs, and telemetry data to detect emerging attack patterns and support incident investigations
• Perform vulnerability assessments and penetration testing to identify weaknesses and validate exploitability
• Collaborate with SOC teams to refine alerting logic and improve incident response workflows
• Develop and enhance security use cases aligned to the MITRE ATT&CK framework
• Partner with infrastructure, cloud, and security teams to prioritize remediation efforts based on risk and business impact

Requirements

• Bachelor's Degree in IT Security, Computer Science, Engineering, or related field
• 3 years of Information Security experience
• Strong hands-on experience with SIEM platforms, IDS/IPS, and endpoint security tools
• Experience in vulnerability management, penetration testing, and threat hunting methodologies
• Ability to analyze network traffic, logs, and security events to identify potential threats
• Working knowledge of intrusion detection techniques, incident response, and digital forensics
• Familiarity with cloud security concepts and AWS core services
• Strong understanding of regulatory frameworks such as NIST, ISO, PCI-DSS, and data privacy standards
• Excellent analytical, problem-solving, and communication skills
• Relevant certifications such as CISSP, GIAC, CCSP, CCSK, or AWS certifications

Core Competencies

Demonstrates expertise in threat hunting, vulnerability assessments, and incident response, with a strong focus on utilizing SIEM and IDS/IPS tools. Proficient in analyzing security alerts and logs to identify and mitigate potential threats while collaborating with cross-functional teams to enhance security measures.