Security Threat Hunter & CTI Engineer — Remote

Ross Stores; Dublin (CA); Remote; USD 125,000 - 213,000; Full time

Job summary

Ross Stores is seeking a Security Engineer II to drive proactive threat hunting, cyber threat intelligence analysis, and risk mitigation across our enterprise environments.

You will collect and analyze data from OSINT, TIPs, SIEM, and EDR to detect APTs and malware, develop actionable reports for technical and executive audiences, and help strengthen our security posture with automation and playbooks.

Qualifications

• 8+ years in cybersecurity with 5+ years in threat intelligence and hunting.
• Experience mentoring CTI analysts and leading teams.
• Expertise in TIPs, SIEM, EDR, and threat data sources.

Responsibilities

• Proactively hunt for APTs, malware, and other threats across networks, systems and apps.
• Synthesize data to produce clear, actionable threat intelligence for technical and leadership audiences.
• Create, optimize, and automate detection rules and enrichment logic using Python/SQL.
• Respond to escalation requests via Helpdesk/NOC or IT teams.
• Contribute to monthly cyber defense dashboards and threat assessments.
• Develop automated workflows and playbooks for detection, analysis and response.
• Map adversary behavior using the MITRE ATT&CK framework.
• On-call duties on rotation.

Skills

Threat hunting

Threat intelligence analysis

Mentoring CTI analysts

Python

SQL

Communication

MITRE ATT&CK

Scripting

Education

Bachelor's degree in related field

Tools

Threat intelligence platforms (TIPs)

SIEM tools

Endpoint detection technologies

STIX/TAXII protocols

Job description

Ross Stores is seeking a Security Engineer II to drive proactive threat hunting, cyber threat intelligence analysis, and risk mitigation across our enterprise environments.

You will collect and analyze data from OSINT, TIPs, SIEM, and EDR to detect APTs and malware, develop actionable reports for technical and executive audiences, and help strengthen our security posture with automation and playbooks.