Remote Security Engineer II — Threat Hunting & CTI

Ross Stores; California (MO); À distance; USD 125 000 - 213 000; Plein temps

Résumé du poste

Ross Stores is seeking a Security Engineer II to proactively hunt for threats and conduct cyber threat intelligence analysis across the organization. You will collect data from OSINT, threat feeds, and SIEM to detect APTs and malware while collaborating with cross-functional teams.

The role requires experience with TIPs, MITRE ATT&CK, and automation using Python and SQL. Remote/on-site options may apply, with on-call rotation and 24x7 readiness emphasized.

Qualifications

• Minimum of 8+ years in cybersecurity with 5+ years in threat intelligence analysis and hunting.
• Proven experience leading or mentoring CTI analysts.
• Strong expertise in TIPs, SIEM, and endpoint detection technologies.
• Proficiency in collecting, analyzing, and disseminating threat intelligence from OSINT and internal sources.

Responsabilités

• Proactively hunt for APTs, malware, and threats across networks, systems, and applications.
• Synthesize data to develop clear, actionable intelligence and reports for technical and leadership audiences.
• Create, optimize, and automate detection rules and enrichment logic using Python and SQL.
• Respond to escalation requests via Helpdesk, NOC, or junior analysts.
• Contribute to monthly Cyber Defense dashboard with security indicators.

Connaissances

Threat hunting

CTI analysis

Mentoring CTI

SIEM tools

TIPs

Python

SQL

MITRE ATT&CK

IoCs

Automation

Communication

Formation

CISSP certification

GCTI certification

Outils

Threat intelligence platforms

Endpoint detection

Description du poste

Ross Stores is seeking a Security Engineer II to proactively hunt for threats and conduct cyber threat intelligence analysis across the organization. You will collect data from OSINT, threat feeds, and SIEM to detect APTs and malware while collaborating with cross-functional teams.

The role requires experience with TIPs, MITRE ATT&CK, and automation using Python and SQL. Remote/on-site options may apply, with on-call rotation and 24x7 readiness emphasized.