Senior Threat Hunter & Detection Architect

Sysco Corp.; Houston (TX); Hybrid; USD 120,000 - 160,000; Full time

Job summary

Sysco Corp. seeks a Cyber Threat Hunting Analyst to lead proactive hunts across endpoints, identity, cloud, email, DNS and proxy data, converting findings into durable detections. This hands-on role also mentors peers and shapes detection and response strategy across teams.

You will own hunt roadmaps, playbooks and analytics, collaborating with CTI, SOC/IR and engineering to operationalize intelligence and improve coverage in a hybrid Houston-based role.

Qualifications

• Bachelor’s degree in Cybersecurity or Computer Science.
• Master’s degree in Cybersecurity or Computer Science preferred.
• 6+ years in SOC, IR, detection engineering or threat hunting.
• 8+ years in related roles preferred.
• GCDA, GCIH, SC-200 certifications preferred.
• Strong threat hunting methodology and tooling experience.
• Excellent documentation and cross-team collaboration skills.

Responsibilities

• Lead complex proactive threat-hunting investigations across multiple data sources to uncover hidden threats.
• Own the threat-hunting roadmap and backlog, define topics and maintain playbooks and use cases.
• Mentor other hunters and analysts and coordinate with CTI, SOC/IR, and engineering teams.
• Translate hunt results into detections, analytics, and reusable queries for production monitoring.

Skills

Threat hunting lead

EDR/SIEM analytics

KQL / query languages

MITRE ATT&CK knowledge

Mentoring teammates

Documentation skills

Education

Bachelor’s degree in Cybersecurity

Master’s degree preferred

GCDA, GCIH, SC-200 certifications

Job description

Sysco Corp. seeks a Cyber Threat Hunting Analyst to lead proactive hunts across endpoints, identity, cloud, email, DNS and proxy data, converting findings into durable detections. This hands-on role also mentors peers and shapes detection and response strategy across teams.

You will own hunt roadmaps, playbooks and analytics, collaborating with CTI, SOC/IR and engineering to operationalize intelligence and improve coverage in a hybrid Houston-based role.