Remote Cyber Threat Hunter | MITRE-Driven Detection Expert

NinjaOne, LLC; Tampa (FL); Híbrido; USD 80.000 - 110.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Medical Insurance

Dental Insurance

Vision Insurance

401K Plan

Unlimited PTO

Growth Opportunities

Descripción de la vacante

NinjaOne, LLC is seeking a Threat Hunter to join our Cyber Threat Intelligence team. You will run proactive hunts, convert intelligence into concrete detections, and produce documented alerts for operationalization by our tooling team. This is a front-line role in a detection pipeline.

We enable flexible remote work from the USA (CA, CO, CT, FL, GA, IL, KS, MA, MD, ME, NJ, NC, NY, OH, OR, TN, TX, VA, WA) with hybrid options in Austin or Tampa. Onsite interviews may be required.

Formación

• 5+ years in security operations, detection engineering, CTI or IR with threat hunting.
• Experience running hypothesis-driven hunts and turning telemetry into conclusions.
• Strong knowledge of adversary TTPs and practical MITRE ATT&CK fluency.
• Ability to query and pivot security telemetry at scale (SIEM/EDR/XDR).
• Ability to translate hunt findings into detection logic and SOP guidance.
• Clear written communication for documentation and detections.

Responsabilidades

• Plan and run hypothesis-driven hunts across endpoint, identity, cloud, and network telemetry.
• Prioritize hunts using CTI and red-team/purple-team findings.
• Map hunts to MITRE ATT&CK to identify coverage gaps.
• Translate findings into detection logic and enrichment for tooling team.
• Collaborate with red team on validation of configuration faults and gaps.
• Document hypotheses, methods, and outcomes for reusable artifacts.
• Contribute threat context during Sev 1 incidents in advisory capacity.
• Perform other duties as needed.

Conocimientos

Adversary mindset

Patience and persistence

Analytical and data pivoting

Durable detections

Cross-team communication

Curiosity to find misses

Herramientas

MITRE ATT&CK

KQL / SPL

Python

Threat Intelligence Platform (TIP)

Descripción del empleo

NinjaOne, LLC is seeking a Threat Hunter to join our Cyber Threat Intelligence team. You will run proactive hunts, convert intelligence into concrete detections, and produce documented alerts for operationalization by our tooling team. This is a front-line role in a detection pipeline.

We enable flexible remote work from the USA (CA, CO, CT, FL, GA, IL, KS, MA, MD, ME, NJ, NC, NY, OH, OR, TN, TX, VA, WA) with hybrid options in Austin or Tampa. Onsite interviews may be required.