Senior Threat Hunter - Capabilities Lead (Remote)

Hidden Jobs; United States; Remote; USD 137,000 - 167,000; Full time

Benefits offered by this job

Equity package

Remote-first

Comprehensive benefits

Job summary

Hidden Jobs in the United States is seeking a Senior Threat Hunter to lead adversary capability analysis focusing on industrial control systems and OT networks. You will hunt for and analyze threat tools, techniques, and tradecraft to inform detection strategies and customer advisories.

You will develop tools, scripts, and workflows, collaborate with threat hunt, research, intelligence, product, and engineering teams, and present findings through webinars, partnerships, and reviews.

Qualifications

• 2-3 years of experience in capabilities development, threat hunting, network-based intrusion analysis, vulnerability analysis, and/or detections development.
• Familiarity with the Diamond Model, the full Kill Chain, and MITRE ATT&CK as analytic frameworks.
• Demonstrated knowledge of adversary threat groups, including their tactics, techniques, procedures, and lifecycle.
• Strong report-writing skills for internal technical teams and external customer-facing audiences.
• Understanding of network analysis and common malware functionality and operations.

Responsibilities

• Develop and maintain tools, scripts, and documentation for capability identification and analysis, collaborating with threat hunt, research, intelligence, product, and engineering teams.
• Hunt for and analyze adversary capabilities across assigned threat groups, contributing to threat assessments, intelligence reporting, and customer-facing advisories.
• Apply analytical tooling such as NetFlow, Censys, VirusTotal, Joe Sandbox, and Shodan alongside query languages like Synapse and Storm to support tracking and investigation.
• Identify automation opportunities in analysis workflows and recommend solutions for telemetry or data-visibility gaps.
• Uphold engineering quality through robust code, testing frameworks, and independent debugging on complex defects.
• Represent the team externally through webinars, industry partnerships, and annual review initiatives.
• Provide hunting and triage support during surge events and incident response engagements.

Skills

C#

Python

Threat hunting

Report writing

Network analysis

Cross-functional collaboration

Tools

NetFlow

Censys

VirusTotal

Joe Sandbox

Shodan

Synapse

Storm

Job description

Hidden Jobs in the United States is seeking a Senior Threat Hunter to lead adversary capability analysis focusing on industrial control systems and OT networks. You will hunt for and analyze threat tools, techniques, and tradecraft to inform detection strategies and customer advisories.

You will develop tools, scripts, and workflows, collaborate with threat hunt, research, intelligence, product, and engineering teams, and present findings through webinars, partnerships, and reviews.