Senior Exposure Threat Hunter

NXP Semiconductors; Austin (TX); On-site; USD 130,000 - 190,000; Full time

Job summary

NXP Semiconductors, located in Austin, TX, seeks an experienced Senior Exposure Threat Hunter to join our Information Security team. You will proactively identify and validate security exposures, attack paths, and weaknesses that threat actors may exploit across the enterprise.

The role requires deep security operations expertise, strong investigative skills, and the ability to translate findings into actionable risk reduction.

Qualifications

• Bachelor's degree or equivalent practical experience in cybersecurity or IT.
• 5+ years in information security, SOC, threat hunting, or incident response.
• Strong understanding of security operations processes and investigative workflows.
• Familiarity with MITRE ATT&CK, Cyber Kill Chain, and threat hunting methodologies.

Responsibilities

• Identify, investigate, and validate security exposures and attack paths across enterprise environments.
• Conduct threat hunting to uncover risks and indicators of compromise not seen by traditional monitoring.
• Analyze logs, telemetry, cloud findings, and threat intel to identify gaps and exploitable conditions.
• Assess attacker perspectives to determine potential exploitation scenarios and business impact.
• Collaborate with SOC, Vulnerability Management, Engineering, Cloud Security, and IR teams to validate findings and aid remediation.
• Develop and improve exposure hunting methodologies and detection rules.
• Document findings, risk assessments, and remediation guidance clearly for stakeholders.
• Provide strategic recommendations to reduce attack surface and improve security posture.

Skills

Analytical skills

Troubleshooting

Problem solving

Communication skills

Security operations

Threat hunting

SIEM/EDR

Cloud security

Identity security

Attack techniques

MITRE ATT&CK

Education

Bachelor's degree in Cybersecurity

Bachelor's degree in Information Technology

Bachelor's degree in Computer Science

Tools

SIEM platforms

EDR/XDR

Identity security tools

Cloud security tools

Exposure management

Attack surface management

Job description

Job Title

Senior Exposure Threat Hunter

Location

Austin, USA

Role Summary

We are seeking an experienced and highly analytical Exposure Threat Hunter to join our Information Security team. This role is focused on proactively identifying, investigating, and validating security exposures, attack paths, and security weaknesses that could be leveraged by threat actors across the enterprise. The ideal candidate will have a strong Information Security background with experience in Security Operations (SOC), Threat Hunting, Security Engineering, Detection Engineering, or Incident Response. They should understand attacker methodologies, common attack techniques, security tooling, and investigative processes, and be capable of identifying potential risks before they can be exploited. This position requires a proactive security mindset, strong investigative skills, and the ability to bridge technical findings with actionable risk reduction strategies.

Job Responsibility

• Proactively identify, investigate, and validate security exposures, attack paths, misconfigurations, and control weaknesses across enterprise environments.
• Conduct threat hunting activities to uncover potential risks, attacker opportunities, and indicators of compromise that may not be detected through traditional monitoring.
• Analyze security telemetry, logs, identity-related data, cloud security findings, endpoint activity, and threat intelligence to identify security gaps and exploitable conditions.
• Assess exposures from an attacker’s perspective and determine potential exploitation scenarios and business impact.
• Leverage security tools and technologies to investigate findings and uncover relationships between assets, identities, privileges, and security controls.
• Collaborate with Security Operations, Vulnerability Management, Engineering, Cloud Security, and Incident Response teams to validate findings and support remediation efforts.
• Contribute to the development and improvement of exposure hunting methodologies, investigative procedures, and operational processes.
• Assist in the creation, tuning, and optimization of detection rules and monitoring capabilities that help identify attacker behaviors and high-risk exposures.
• Research emerging threats, attacker techniques, and industry trends to improve threat hunting and exposure management capabilities.
• Document findings, risk assessments, recommendations, and remediation guidance in a clear and actionable manner.
• Provide strategic recommendations to reduce organizational attack surface and improve overall security posture.

Required Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or equivalent practical experience.
• Minimum 5 years of experience in Information Security, preferably within one or more of the following areas: Security Operations Center (SOC), Threat Hunting, Security Engineering, Detection Engineering, Incident Response.
• Strong understanding of security operations processes, methodologies, and investigative workflows.
• Solid understanding of the cyber-attack lifecycle and common attacker tactics, techniques, and procedures (TTPs).
• Experience working with enterprise security technologies such as: SIEM platforms, EDR/XDR solutions, Identity security tools, Cloud security platforms, Exposure management and attack surface management solutions.
• Knowledge of common attack techniques, including: Initial access, Credential abuse, Privilege escalation, Persistence, Lateral movement, Defense evasion, Data access and exfiltration techniques.
• Experience analyzing security logs, endpoint telemetry, authentication activity, network events, and cloud-native security data.
• Understanding security detections, alerting mechanisms, and investigative techniques.
• Familiarity with industry frameworks and methodologies such as: MITRE ATT&CK, Cyber Kill Chain, Threat Hunting methodologies, Risk-based prioritization approaches.
• Strong analytical, troubleshooting, and problem-solving skills.
• Excellent written and verbal communication skills.

Preferred Qualifications

• Experience working within large-scale enterprise Information Security environments.
• Experience with exposure management, attack path analysis, identity security, attack surface management, or adversary exposure validation programs.
• Strong knowledge of SIEM platforms and security event analysis, including the ability to investigate, correlate, and analyze security telemetry from multiple data sources to identify attacker activity, security weaknesses, and emerging threats.
• Understanding of cloud security concepts across Azure, AWS, or Google Cloud environments.
• Experience developing, tuning, or maintaining security detections and analytics.
• Familiarity with threat intelligence and its application within security investigations and threat hunting activities.
• Experience working with automation or orchestration capabilities within security operations environments.

Preferred Certifications

• GIAC Certified Incident Handler (GCIH)
• GIAC Certified Forensic Analyst (GCFA)
• GIAC Cyber Threat Intelligence (GCTI)
• GIAC Certified Intrusion Analyst (GCIA)
• Offensive Security Certified Professional (OSCP)

About NXP

More information about NXP in the United States... NXP is an Equal Opportunity/Affirmative Action Employer regardless of age, color, national origin, race, religion, creed, gender, sex, sexual orientation, gender identity and/or expression, marital status, status as a disabled veteran and/or veteran of the Vietnam Era or any other characteristic protected by federal, state or local law. In addition, NXP will provide reasonable accommodations for otherwise qualified disabled individuals.

#LI-97b2

NXP Semiconductors N.V. (NASDAQ: NXPI) enables a smarter, safer, and more sustainable world through innovation. As the world leader in secure connectivity solutions for embedded applications, NXP is pushing boundaries in the automotive, industrial & IoT, mobile, and communication infrastructure markets.

For more information, visit www.nxp.com

Bright Minds. Bright Futures. We believe that a key component to growing our business is to develop our people. To enable you to grow your career at NXP, we offer online and offline learning opportunities to help you develop some of your core and professional skills.

Commitment

At NXP. We recognize NXP is a powerful change agent as we continue to deliver innovative solutions that advance a more sustainable future. We remain steadfast in our commitment to sustainability and making measurable year-on-year progress. Also, we aim to create an inclusive work environment and we will not tolerate racism, discrimination or harassment of any kind. We have programs in place focused on diversity, inclusion and equality.

Thank you for considering a career at NXP.

Thank you for your interest in supporting our recruitment efforts.

Please note that NXP operates under a strict Preferred Supplier List (PSL) for all recruitment activities. Any candidate profiles or resume submitted without a prior written agreement or explicit request from our Talent Acquisition team will be considered unsolicited. Such submissions will be deemed free of any obligations, and no fees will be paid by NXP or any of its affiliates, subsidiaries, or divisions - regardless of whether the candidate is hired, either coincidentally or otherwise.

Thank you for your understanding.