Senior Exposure Threat Hunter

NXP Semiconductors NV; Austin (TX); On-site; USD 120,000 - 180,000; Full time

Job summary

NXP Semiconductors NV in Austin, TX is seeking a Senior Exposure Threat Hunter to join our Information Security team. You will proactively identify, investigate, and validate security exposures, attack paths, and weaknesses across enterprise environments.

The role requires a strong security operations background, experience in threat hunting, and the ability to translate findings into actionable risk reduction.

Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or equivalent practical experience.
• Minimum 5 years of Information Security experience in SOC, Threat Hunting, Security Engineering, Detection Engineering, or Incident Response.
• Strong understanding of security operations processes and investigative workflows.
• Knowledge of MITRE ATT&CK, Cyber Kill Chain, Threat Hunting methodologies, and risk-based prioritization.
• Experience with SIEM, EDR/XDR, identity security, cloud security, and exposure management.
• Familiarity with attacker techniques such as Initial access, Credential abuse, Privilege escalation, Persistence, Lateral movement, Defense evasion, Data exfiltration.
• Strong analytical, troubleshooting, and communication skills.

Responsibilities

• Identify, investigate, and validate security exposures, attack paths, misconfigurations, and control weaknesses.
• Conduct threat hunting to uncover risks and indicators of compromise not seen by traditional monitoring.
• Analyze security telemetry, logs, identity data, cloud findings, endpoint activity, and threat intel to find gaps.
• Assess exposures from attacker perspective and determine exploitation scenarios and business impact.
• Collaborate with SOC, Vulnerability Management, Engineering, Cloud Security, and IR teams to validate findings.
• Develop and improve exposure hunting methodologies and processes.
• Assist in tuning detection rules and monitoring capabilities for attacker behavior.
• Research emerging threats and attacker techniques to improve capabilities.
• Document findings, risk assessments, and remediation guidance clearly.
• Provide strategic recommendations to reduce attack surface and improve security posture.

Skills

Threat Hunting

SOC

Security Operations

Incident Response

Threat intelligence

Detection Engineering

Cloud Security

Education

Bachelor's degree

Equivalent practical experience

Tools

SIEM platforms

EDR/XDR

Identity security tools

Cloud security platforms

Exposure management tools

Attack surface management

Job description

Job Title: Senior Exposure Threat Hunter

Location: Austin, USA

Role Summary

We are seeking an experienced and highly analytical Exposure Threat Hunter to join our Information Security team. This role is focused on proactively identifying, investigating, and validating security exposures, attack paths, and security weaknesses that could be leveraged by threat actors across the enterprise.

The ideal candidate will have a strong Information Security background with experience in Security Operations (SOC), Threat Hunting, Security Engineering, Detection Engineering, or Incident Response. They should understand attacker methodologies, common attack techniques, security tooling, and investigative processes, and be capable of identifying potential risks before they can be exploited.

This position requires a proactive security mindset, strong investigative skills, and the ability to bridge technical findings with actionable risk reduction strategies.

Job Responsibility

• Proactively identify, investigate, and validate security exposures, attack paths, misconfigurations, and control weaknesses across enterprise environments.
• Conduct threat hunting activities to uncover potential risks, attacker opportunities, and indicators of compromise that may not be detected through traditional monitoring.
• Analyze security telemetry, logs, identity-related data, cloud security findings, endpoint activity, and threat intelligence to identify security gaps and exploitable conditions.
• Assess exposures from an attacker’s perspective and determine potential exploitation scenarios and business impact.
• Leverage security tools and technologies to investigate findings and uncover relationships between assets, identities, privileges, and security controls.
• Collaborate with Security Operations, Vulnerability Management, Engineering, Cloud Security, and Incident Response teams to validate findings and support remediation efforts.
• Contribute to the development and improvement of exposure hunting methodologies, investigative procedures, and operational processes.
• Assist in the creation, tuning, and optimization of detection rules and monitoring capabilities that help identify attacker behaviors and high-risk exposures.
• Research emerging threats, attacker techniques, and industry trends to improve threat hunting and exposure management capabilities.
• Document findings, risk assessments, recommendations, and remediation guidance in a clear and actionable manner.
• Provide strategic recommendations to reduce organizational attack surface and improve overall security posture.

Required Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or equivalent practical experience.
• Minimum 5 years of experience in Information Security, preferably within one or more of the following areas:
  • Security Operations Center (SOC)
  • Threat Hunting
  • Security Engineering
  • Detection Engineering
  • Incident Response
• Strong understanding of security operations processes, methodologies, and investigative workflows.
• Solid understanding of the cyber-attack lifecycle and common attacker tactics, techniques, and procedures (TTPs).
• Experience working with enterprise security technologies such as:
  • SIEM platforms
  • EDR/XDR solutions
  • Identity security tools
  • Cloud security platforms
  • Exposure management and attack surface management solutions
• Knowledge of common attack techniques, including:
  • Initial access
  • Credential abuse
  • Privilege escalation
  • Persistence
  • Lateral movement
  • Defense evasion
  • Data access and exfiltration techniques
• Experience analyzing security logs, endpoint telemetry, authentication activity, network events, and cloud-native security data.
• Understanding security detections, alerting mechanisms, and investigative techniques.
• Familiarity with industry frameworks and methodologies such as:
  • MITRE ATT&CK
  • Cyber Kill Chain
  • Threat Hunting methodologies
  • Risk-based prioritization approaches
• Strong analytical, troubleshooting, and problem-solving skills.
• Excellent written and verbal communication skills.

Preferred Qualifications

• Experience working within large-scale enterprise Information Security environments.
• Experience with exposure management, attack path analysis, identity security, attack surface management, or adversary exposure validation programs.
• Strong knowledge of SIEM platforms and security event analysis, including the ability to investigate, correlate, and analyze security telemetry from multiple data sources to identify attacker activity, security weaknesses, and emerging threats.
• Understanding of cloud security concepts across Azure, AWS, or Google Cloud environments.
• Experience developing, tuning, or maintaining security detections and analytics.
• Familiarity with threat intelligence and its application within security investigations and threat hunting activities.
• Experience working with automation or orchestration capabilities within security operations environments.

Preferred Certifications

• GIAC Certified Incident Handler (GCIH)
• GIAC Certified Forensic Analyst (GCFA)
• GIAC Cyber Threat Intelligence (GCTI)
• GIAC Certified Intrusion Analyst (GCIA)
• Offensive Security Certified Professional (OSCP)

More information about NXP in the United States...

NXP is an Equal Opportunity/Affirmative Action Employer regardless of age, color, national origin, race, religion, creed, gender, sex, sexual orientation, gender identity and/or expression, marital status, status as a disabled veteran and/or veteran of the Vietnam Era or any other characteristic protected by federal, state or local law. In addition, NXP will provide reasonable accommodations for otherwise qualified disabled individuals.