Remote Threat Hunter: Advanced Cyber Defense & Research

Binary Defense; Houston (TX); Hybrid; USD 95,000 - 150,000; Full time

Benefits offered by this job

Medical coverage

401k match

Remote-friendly

Training opportunities

Job summary

Binary Defense is seeking a Threat Hunter to join our Threat Hunting Team. This role focuses on tracking threat actor techniques, turning intelligence into original research, and building hunts that surface threats across client environments.

The candidate should translate techniques into hunting and detection logic across multiple SIEM/EDR platforms, communicating findings clearly in a client-facing environment.

Qualifications

• Hands-on experience hunting for threat actor activity using EDR and/or SIEM platforms.
• Ability to build and tune hunting and detection queries in platform-native languages (e.g., KQL, SPL).
• Excellent written and verbal communication, with the ability to explain findings clearly to clients/teammates.

Responsibilities

• Track emerging threat actor techniques from breaking research and threat intel.
• Develop original research from observed malware and TTPs; extract IOCs and detection opportunities.
• Build/tune client-facing threat hunts as queries across customer EDR and SIEM platforms.
• Serve as a technical point of contact for clients; communicate hunt findings and recommendations.

Skills

EDR hunting

SIEM hunting

KQL & SPL

Threat intelligence to hunts

Malware analysis

Windows/Linux/macOS

Written and verbal communication

Threat actor techniques

Network traffic analysis

Education

Associate degree or 2+ years hands-on experience

Tools

Microsoft Defender

Sentinel

Splunk

CrowdStrike

Job description

Binary Defense is seeking a Threat Hunter to join our Threat Hunting Team. This role focuses on tracking threat actor techniques, turning intelligence into original research, and building hunts that surface threats across client environments.

The candidate should translate techniques into hunting and detection logic across multiple SIEM/EDR platforms, communicating findings clearly in a client-facing environment.