Lead Threat Hunter & Security Operations Engineer

Cencora; Carrollton (TX); On-site; USD 150,000 - 200,000; Full time

Benefits offered by this job

Medical benefits

Dental & Vision

Backup dependent care

Parental leave

Professional development

Mentorship programs

Volunteer opportunities

Job summary

Cencora is seeking a Threat Hunting Engineer Lead to guide threat hunting, incident response, and detection engineering within the Security Operations Center. You will drive improvements in SIEM/EDR/SOAR capabilities, coordinate across teams, and deliver actionable security briefings.

Required are 7+ years in cybersecurity, with 4+ years in incident response or threat hunting, and strong scripting skills. This is a full-time role based in the United States (Texas).

Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, or equivalent work experience.
• 7+ years of cybersecurity experience with at least 4 years in incident response, forensics, threat hunting, or related role.
• Expertise with SIEM/EDR/SOAR and related logging platforms.
• Strong understanding of network protocols, OS internals (Windows, Linux, MacOS), cloud security, and defensive security.
• Familiarity with MITRE ATT&CK framework.

Responsibilities

• Conduct threat hunting to identify, classify, prioritize, and report on cyber threats.
• Research emerging threats; correlate and trend cyber incident activity.
• Craft methodologies for monitoring, detection, and analytics for SIEM, EDR, SOAR, and other platforms.
• Provide security gap analysis and effectiveness assessments of security technologies.
• Formulate methodologies to monitor and respond to security events.
• Correlate data sources to enhance detection, monitoring, and response capabilities.
• Collaborate across teams on incident response, investigations, countermeasures, and recovery.
• Analyze incidents to improve alerting schemas and provide security briefings on critical issues.

Skills

Threat hunting

Incident response

Networking fundamentals

MITRE ATT&CK

Communication skills

Scripting (Python/PowerShell)

Education

Bachelor’s degree in Cybersecurity / related field

Master’s degree in Cybersecurity / related field

Tools

SIEM

EDR

SOAR

GIAC GCFA

GIAC GCFR

GIAC GNFA

GIAC GCIA

GIAC GCDA

GIAC GDAT

Job description

Cencora is seeking a Threat Hunting Engineer Lead to guide threat hunting, incident response, and detection engineering within the Security Operations Center. You will drive improvements in SIEM/EDR/SOAR capabilities, coordinate across teams, and deliver actionable security briefings.

Required are 7+ years in cybersecurity, with 4+ years in incident response or threat hunting, and strong scripting skills. This is a full-time role based in the United States (Texas).