Senior Cyber Threat Hunter & Detection Lead | Hybrid

Sysco Corp.; United States; Hybrid; USD 120,000 - 180,000; Full time

Job summary

Sysco Corporation is seeking a Cyber Threat Hunting Analyst to serve as a technical lead for threat hunting across endpoints, identity, cloud, email, and DNS/proxy data. You will design and drive hunt campaigns, convert findings into durable detection content, and mentor other hunters and analysts.

The role requires hands-on experience in SOC/IR or detection with a passion for investigative work. You will collaborate with cross-team detection strategy discussions and support production

Qualifications

• Bachelor’s degree in Cybersecurity or Computer Science required.
• 6+ years in SOC/IR/detection or threat hunting with demonstrable telemetry analysis.
• GCDA, GCIH, SC-200 certifications preferred.

Responsibilities

• Lead complex threat-hunting investigations across EDR, SIEM/log analytics, identity, cloud, email, DNS and web proxy data.
• Own the threat-hunting roadmap and backlog; define hunt topics and maintain playbooks and use cases.
• Establish behavioral baselines for users, systems and apps to distinguish benign anomalies from indicators of compromise.
• Translate hunts into detection content and lead testing/tuning with Detection Engineering for production rollout.
• Collaborate with CTI, SOC/IR and red-team to operationalize intelligence and expand investigations.

Skills

Threat hunting

EDR

SIEM analytics

Identity (AD/Azure AD/IdP)

MITRE ATT&CK

Detection engineering

Education

Bachelor's in Cybersecurity or CS

Master's in Cybersecurity or CS

Tools

SIEM

KQL

Job description

Sysco Corporation is seeking a Cyber Threat Hunting Analyst to serve as a technical lead for threat hunting across endpoints, identity, cloud, email, and DNS/proxy data. You will design and drive hunt campaigns, convert findings into durable detection content, and mentor other hunters and analysts.

The role requires hands-on experience in SOC/IR or detection with a passion for investigative work. You will collaborate with cross-team detection strategy discussions and support production