Senior Threat Hunter & Detection Engineer

Foresite MSP; Olathe (KS); On-site; USD 90,000 - 130,000; Full time

Benefits offered by this job

Health insurance

Dental coverage

Short-Term Disability

Long-Term Disability

Paid vacation

Job summary

Foresite MSP is seeking an experienced Threat Analyst moving into threat hunting. The role requires independent handling of complex alerts, escalation of SOC issues, and collaboration on incidents for enterprise clients.

You will execute hunts, write detection logic, and enrich investigations with Google Threat Intelligence while supporting specialized engagements like insider threat monitoring.

Qualifications

• Experience equivalent to a Tier 2 SOC analyst with solid incident response fundamentals.
• Strong log analysis across endpoint, network, identity, and cloud telemetry.
• Working knowledge of MITRE ATT&CK, Cyber Kill Chain, and Diamond Model.
• Ability to write queries to identify threats based on intel; eager to learn YARA-L 2.0.
• Certifications such as Security+, CySA+, OSCP or equivalent.

Responsibilities

• Execute established threat hunts across client environments using IOCs and TTPs.
• Write and tune detection logic in YARA-L 2.0 to improve coverage.
• Act as escalation point for SOC analysts handling complex alerts.
• Support incident response during active incidents and contribute to incident command.
• Enrich detections using Google Threat Intelligence and reports.
• Assist with insider threat investigations and dark web monitoring tasks.
• Document hunt results, detections, and lessons learned for clients and internal use.

Skills

Threat hunting

Incident response

Log analysis

Communication

Threat intel consumption

Education

Security+ or equivalent

Tools

YARA-L 2.0

Google Threat Intelligence

EDR/XDR ecosystems

Threat hunting tooling

Job description

Foresite MSP is seeking an experienced Threat Analyst moving into threat hunting. The role requires independent handling of complex alerts, escalation of SOC issues, and collaboration on incidents for enterprise clients.

You will execute hunts, write detection logic, and enrich investigations with Google Threat Intelligence while supporting specialized engagements like insider threat monitoring.