Senior Threat Hunter: AI-Driven Enterprise Defense

Allstate Foundation; Illinois; On-site; USD 120,000 - 175,000; Full time

Job summary

Allstate Foundation is seeking a Lead Threat Hunter to drive hypothesis-driven, intelligence-led hunts across enterprise, cloud, and OT/IoT environments. You will operationalize findings into durable detections and work with Threat Intelligence, IR, and Detection Engineering to reduce enterprise exposure.

Responsibilities include developing hunt campaigns, designing analyses of telemetry, and producing evidence-based post-hunt reports for executive audiences.

Qualifications

• 7+ years of experience in security operations with 4+ years dedicated to threat hunting.
• Demonstrated experience executing MITRE ATT&CK-aligned hunts with documented outcomes.

Responsibilities

• Lead hypothesis-driven, intelligence-led hunt campaigns mapped to MITRE ATT&CK.
• Design and execute analytics against large-scale telemetry to uncover adversary tradecraft.
• Perform identity-centric hunting across Entra ID, AD, and SaaS platforms.
• Conduct cloud-native hunting across AWS, Azure, M365, and SaaS control planes.
• Convert hunt findings into durable detections and playbooks.

Skills

Threat hunting

Security operations

MITRE ATT&CK

SIEM

AI/LLM tooling

Python scripting

Cloud security

Detections development

Executive communication

Tools

Splunk

Sentinel

Elastic

CrowdStrike

Defender

SentinelOne

Tanium

Job description

Allstate Foundation is seeking a Lead Threat Hunter to drive hypothesis-driven, intelligence-led hunts across enterprise, cloud, and OT/IoT environments. You will operationalize findings into durable detections and work with Threat Intelligence, IR, and Detection Engineering to reduce enterprise exposure.

Responsibilities include developing hunt campaigns, designing analyses of telemetry, and producing evidence-based post-hunt reports for executive audiences.