Senior Threat Engineer - Remote, Lead Threat Hunting & IR

UNFI; Providence (RI); On-site; USD 120,000 - 155,000; Full time

Job summary

UNFI seeks a Senior Cybersecurity Engineer – Threat Engineer to lead threat hunting, incident response and advanced threat research within a remote-friendly security operations program. You will map adversary TTPs to MITRE ATT&CK, analyze telemetry, and drive improvements across detection and response capabilities.

Responsibilities include leading purple team exercises, mentoring SOC staff, and collaborating with Threat Intelligence, GRC and engineering teams to strengthen resilience against

Qualifications

• Bachelor's degree in Computer or Cybersecurity domain.
• One senior cybersecurity certification (e.g., CISSP, GCTI, CTIA, CPTIA, MITRE MAD ATT&CK).
• 8+ years of hands-on cybersecurity experience within on-prem and Cloud environments.
• Experience testing and managing detection rules in SIEMs and with EDR/ND protections.

Responsibilities

• Lead incident response & containment for high-severity incidents; orchestrate scoping, containment, eradication, and recovery.
• Perform advanced threat research; map adversary behaviors to MITRE ATT&CK and other frameworks.
• Lead proactive threat hunting across endpoints, networks, and cloud; analyze telemetry and detect gaps.
• Conduct digital forensics and malware analysis; preserve artifacts and maintain chain of custody.
• Lead purple team engagements to validate detections and drive security improvements.
• Mentor SOC staff; collaborate with Threat Intelligence, GRC and Engineering teams to share knowledge.

Skills

Threat hunting

Incident response

Threat research

MITRE ATT&CK

Education

BA/BS in Computer/Cybersecurity

CISSP (or equivalent)

GCTI

CTIA

CPTIA

MAD ATT&CK Certification

Tools

EDR

SIEM

UEBA

Job description

UNFI seeks a Senior Cybersecurity Engineer – Threat Engineer to lead threat hunting, incident response and advanced threat research within a remote-friendly security operations program. You will map adversary TTPs to MITRE ATT&CK, analyze telemetry, and drive improvements across detection and response capabilities.

Responsibilities include leading purple team exercises, mentoring SOC staff, and collaborating with Threat Intelligence, GRC and engineering teams to strengthen resilience against