Cyber Threat Hunting Lead - Detect & Contain Threats

FIS; Jacksonville (FL); On-site; USD 120,000 - 170,000; Full time

Job summary

FIS Management Services, LLC seeks Cyber Security Analyst Leads to drive proactive threat hunting in Jacksonville, FL. You will lead hunts across endpoints, network, identity and cloud telemetry to reduce attack dwell time and improve detections.

You will translate threat intelligence into high-fidelity analytics mapped to MITRE ATT&CK and partner with SOC, Pen Testing, and Detection Engineering to operationalize detections and playbooks. Automation of workflows with scripting will be encouraged.

Qualifications

• Bachelor's degree or equivalent in CS, Cyber Security, Digital Forensics, or related field; 7+ years of relevant experience.
• Alternative: Master's degree with 5 years of relevant experience.
• Experience investigating endpoint threats using EDR solutions; experience tuning and investigating detections in SIEMs.

Responsibilities

• Lead proactive threat hunts across endpoints, network, identity and cloud telemetry.
• Execute complex investigations using EDR and SIEM; correlate evidence and scope, contain, and support remediation.
• Translate threat intel and adversary TTPs into MITRE ATT&CK-aligned detections and durable playbooks.
• Automate hunting workflows with scripting (Python, PowerShell, Bash) to improve speed and signal quality.
• Collaborate with SOC, Penetration Testing Teams and Detection Engineering to operationalize hunts into detections.

Skills

Threat hunting

Endpoint security

SIEM analysis

Education

Bachelor's degree in Computer Science / Cyber Security / Digital Forensics

Master's degree in the listed fields (alternative)

Tools

EDR platforms

SIEM platforms

Python

PowerShell

Bash

Job description

FIS Management Services, LLC seeks Cyber Security Analyst Leads to drive proactive threat hunting in Jacksonville, FL. You will lead hunts across endpoints, network, identity and cloud telemetry to reduce attack dwell time and improve detections.

You will translate threat intelligence into high-fidelity analytics mapped to MITRE ATT&CK and partner with SOC, Pen Testing, and Detection Engineering to operationalize detections and playbooks. Automation of workflows with scripting will be encouraged.