Proactive Threat Hunter & Cyber Defense Analyst

Motion Recruitment; Charlotte (NC); On-site; USD 62,000 - 96,000; Full time

Benefits offered by this job

Medical Insurance

Dental Benefits

Vision Benefits

Paid Time Off (PTO)

401(k)

Job summary

Motion Recruitment is seeking a Threat Hunter in Charlotte to support proactive cybersecurity investigations across a complex enterprise. You will work with security data, SIEM platforms, and AI-generated findings to identify malicious behavior and drive appropriate responses.

The role sits between traditional threat hunting and cyber response, investigating suspicious activity, correlating data, and collaborating with incident response and engineering teams to remediate threats.

Qualifications

• Professional experience in a Security Operations Center.
• Strong experience with Splunk or another enterprise SIEM platform.
• Experience reviewing and correlating large volumes of security logs.
• Hands-on experience with endpoint detection and response tools.

Responsibilities

• Conduct proactive searches for suspicious and malicious activity.
• Analyze SIEM events, endpoint telemetry, and aggregated security logs.
• Investigate findings generated by automated and AI-driven security scanning.
• Validate vulnerabilities and determine the severity of identified issues.
• Investigate suspicious web activity, certificate misuse, and abnormal system behavior.
• Correlate events across multiple security tools and data sources.
• Determine whether findings require containment, escalation, or remediation.
• Partner with incident response and engineering teams to address confirmed threats.
• Document investigation results and recommended actions.
• Improve detection and investigation processes based on newly discovered threats.

Skills

SOC experience

Splunk

Log correlation

EDR tools

Threat hunting

ATT&CK knowledge

Python scripting

Cloud security

Job description

Motion Recruitment is seeking a Threat Hunter in Charlotte to support proactive cybersecurity investigations across a complex enterprise. You will work with security data, SIEM platforms, and AI-generated findings to identify malicious behavior and drive appropriate responses.

The role sits between traditional threat hunting and cyber response, investigating suspicious activity, correlating data, and collaborating with incident response and engineering teams to remediate threats.