Senior Threat Hunter & Detection Engineer - Remote

Jobicy; United States; Remote; USD 104,000 - 118,000; Full time

Benefits offered by this job

Fully remote work

Annual US trip for Summer Summit

Home office setup reimbursement

Parental leave

Phone/internet allowance

Tech stipend

Private health insurance

Stock options

Coaching access

Diversity and inclusion focus

Job summary

Huntress is a remote-first cybersecurity company hiring a Senior Detection Engineering and Threat Hunting Analyst. You will translate threat intelligence into practical detections, drive investigations, and scale detection across identity and endpoint domains while collaborating with our SOC and Adversary Tactics teams.

The role blends detection engineering with proactive threat hunting and requires comfort with AI-assisted workflows, large-scale telemetry, and cross-functional collaboration.

Qualifications

• 2+ years of experience in detection engineering, threat hunting, SOC, MDR, or incident response.
• Intermediate knowledge of Windows internals.
• Working knowledge of Linux, macOS, Microsoft 365, Azure, and Google Workspace.
• Experience developing, testing, tuning, and documenting detections or analytics from threat intelligence, IOCs, hypotheses, or real-world investigations.
• Ability to communicate findings through clear written reports.
• Strong familiarity with detection languages such as Sigma, Suricata, Snort, or YARA, and query languages such as KQL, EQL, ES|QL, or Splunk SPL.
• A sound understanding of adversary tradecraft and attacker techniques.

Responsibilities

• Contribute to all parts of the detection lifecycle by creating new rules, testing them before deployment, monitoring efficacy, and tuning or retiring rules.
• Develop rules across Huntress products and operating systems such as Identity Threat Detection and Response (ITDR), SIEM, EDR, Windows, Linux, and MacOS.
• Manage DE/TH requests raised internally or escalated from partners.
• Undertake hypothesis-driven hunts across Huntress telemetry and prioritize techniques that may evade high-fidelity detections.
• Consume threat intelligence and translate IOCs, TTPs, and findings into detections through Git workflows.
• Build and refine hunting dashboards or queries to surface potential intrusions.
• Review ambiguous signs of attacker activity and surface likely intrusions for deeper investigation.
• Investigate or elevate likely intrusions to ensure clear incident reports with guidance.
• Contribute findings to community projects and create Huntress content (blogs, posts, videos, podcasts, webinars).
• Use AI-assisted workflows to prototype queries and ensure AI outputs are validated before production.

Skills

Threat hunting

Detection engineering

SOC

KQL

Sigma

Suricata

YARA

Tools

Git

Sigma

Suricata

Snort

YARA

KQL

ES|QL

Splunk SPL

Job description

Huntress is a remote-first cybersecurity company hiring a Senior Detection Engineering and Threat Hunting Analyst. You will translate threat intelligence into practical detections, drive investigations, and scale detection across identity and endpoint domains while collaborating with our SOC and Adversary Tactics teams.

The role blends detection engineering with proactive threat hunting and requires comfort with AI-assisted workflows, large-scale telemetry, and cross-functional collaboration.