Cyber Threat Hunter Lead

American Electric Power; Austin (TX); On-site; USD 116,000 - 151,000; Full time

Benefits offered by this job

Competitive compensation

Comprehensive benefits package

Job summary

American Electric Power is seeking a senior threat hunter to proactively hunt across enterprise, cloud, OT, and identity environments. You will lead investigations of advanced threats, develop detections, and translate findings into playbooks with Detection Engineering and SOC teams.

You'll mentor junior analysts, communicate complex risks clearly, and drive improvements in visibility, telemetry, and defenses, collaborating with government and industry partners to strengthen cyber resilience.

Qualifications

• 7+ years IT-related experience.
• OR 5+ years of security-related experience, including military/government work.

Responsibilities

• Lead proactive threat hunting across enterprise, cloud, OT to identify adversary activity.
• Analyze threat intel and TTPs to prioritize hunting efforts affecting AEP.
• Develop hypothesis-driven threat hunts using MITRE ATT&CK and CTI methodologies.
• Lead complex investigations involving advanced threats and intrusions.
• Advise during cyber incidents with threat analysis, scoping and remediation guidance.
• Translate findings into detections, use cases, and security improvements with SOC teams.

Education

Bachelor's degree or Associate degree in IT/security

High School Diploma/GED with 4 years IT security experience

Job description

Job Posting End Date

11-17-2026

Please note the job posting will close on the day before the posting end date.

Job Summary

At AEP, we’re more than just an energy company!

We’re a team of dedicated professionals committed to delivering safe, reliable, and innovative energy solutions. Guided by our mission to put the customer first, we strive to exceed expectations by listening, responding, and continuously improving the way we serve our communities. If you're passionate about making a meaningful impact and being part of a forward-thinking organization, this is the company for you!

Job Description

What You’ll Do:

• Lead proactive threat hunting operations across enterprise, cloud, identity, and operational technology environments to identify and disrupt advanced adversary activity.
• Analyze cyber threat intelligence, adversary TTPs, and emerging threat trends to assess risk and prioritize hunting efforts impacting AEP.
• Develop and execute hypothesis-driven threat hunts utilizing MITRE ATT&CK, Cyber Kill Chain, and intelligence-driven methodologies.
• Lead complex investigations involving advanced persistent threats, insider threats, ransomware, and targeted intrusion activity.
• Serve as a senior technical advisor during cyber incident response activities by providing threat analysis, scoping, forensic expertise, and remediation recommendations.
• Conduct advanced host, network, memory, and malware analysis to uncover adversary behavior and identify indicators of compromise.
• Reverse engineer malware and attacker tools to develop intelligence, improve detections, and support threat response efforts.
• Translate hunting findings into actionable detection content, use cases, and security improvements in collaboration with Detection Engineering and Security Operations teams.
• Identify gaps in visibility, telemetry, and security controls, and recommend strategic improvements to strengthen cyber defense capabilities.
• Partner with government agencies, intelligence-sharing organizations, industry peers, and internal stakeholders to enhance threat awareness and defensive readiness.
• Develop threat hunting playbooks, methodologies, and operational standards to improve consistency and maturity across the threat hunting program.
• Mentor and coach junior threat hunters and analysts, fostering technical growth and strengthening team investigative capabilities.
• Communicate complex technical findings and cyber risks in a clear and actionable manner for both technical and non-technical audiences.
• Leverage cybersecurity tooling and advanced analytics to uncover stealthy or previously unidentified threats.
• Drive continuous improvement of hunting capabilities through automation, detection enhancement, adversary emulation, and lessons learned from incidents and hunt operations.
• Establish and track threat hunting metrics to measure effectiveness, demonstrate value, and guide program improvements.
• Maintain expert-level knowledge of emerging threat actors, attack techniques, vulnerabilities, and cybersecurity technologies to proactively strengthen organizational defenses.

What We’re Looking For:

Education requirements are listed below:

• Bachelor's degree OR Associates degree with 2 years relevant experience in system administration/help desk/security (cyber or physical).
• OR High School Diploma/GED with 4 years relevant experience in IT system administration/help desk/security (cyber or physical).

Work Experience requirement listed below:

• 7 or more years of Information Technology related experience.
• OR 5 or more years of security related experience, which may include military/government work experience in addition to any experience identified above.

What You’ll Get:

In addition to a competitive compensation, AEP offers a unique comprehensive benefits package that aims to support and enhance the overall well-being of our employees.

Where Putting the Customer First Powers Everything We Do!

At AEP, we’re more than just an energy company — we’re a team of dedicated professionals committed to delivering safe, reliable, and innovative energy solutions. Guided by our mission to put the customer first, we strive to exceed expectations by listening, responding, and continuously improving the way we serve our communities. If you're passionate about making a meaningful impact and being part of a forward-thinking organization, this is the company for you!

Compensation Data

Compensation Grade:

SP20-009

Compensation Range:

$116,255.00 - $151,132.50

The Physical Demand Level for this job is: S – Sedentary Work: Exerting up to 10 pounds of force occasionally (Occasionally: activity or condition exists up to 1/3 of the time) and/or a negligible amount of force frequently. (Frequently: activity or condition exists from 1/3 to 2/3 of the time) to lift, carry, push, pull or otherwise move objects, including the human body. Sedentary work involves sitting most of the time but may involve walking or standing for brief periods of time. Jobs are sedentary if walking and standing are required only occasionally, and all other sedentary criteria are met.

It is hereby reaffirmed that it is the policy of American Electric Power (AEP) to provide Equal Employment Opportunity in all respects of the employer-employee relationship including recruiting, hiring, upgrading and promotion, conditions and privileges of employment, company sponsored training programs, educational assistance, social and recreational programs, compensation, benefits, transfers, discipline, layoffs and termination of employment to all employees and applicants without discrimination because of race, color, religion, sex (including pregnancy, gender identity, and sexual orientation), national origin, age, veteran or military status, disability, genetic information, or any other basis prohibited by applicable law. When required by law, we might record certain information or applicants for employment may be invited to voluntarily disclose protected characteristics.