Senior Threat Hunter, Exploit Intelligence (Remote)

VulnCheck Inc.; Lexington (VA); Remote; USD 160,000 - 210,000; Full time

Benefits offered by this job

Unlimited PTO

401k plan

Healthcare coverage

Parental leave

Remote friendly environment

Cell Phone & Internet reimbursement

Professional development resources

Career advancement

Job summary

VulnCheck Inc. is seeking a Principal Threat Hunter to discover and document real-world exploitation, and to turn findings into durable improvements to detection capabilities across our datasets.

You will operate across Canary Intelligence and Target Intelligence datasets, shaping the threat hunting program with substantial latitude. The role emphasizes research independence, building scalable tooling, and producing customer-facing intelligence and blog content.

Qualifications

• Experience communicating technical security research through public writing, threat intelligence reports, blogs, presentations, or other published work.
• Experience hunting for threats, analyzing attacker activity, threat intelligence research, or related security research.
• Ability to read and analyze PCAPs and reason about network traffic and protocols.
• Experience developing and tuning detections, including Suricata and/or Snort rules, and translating research findings into repeatable detection capabilities.
• Experience writing Nuclei templates or other scanners to identify vulnerabilities, exposed services, or attacker infrastructure.
• Strong programming or scripting ability with multiple languages.
• Experience working with Linux systems, networking, and internet-facing infrastructure.
• Ability to analyze malware, payloads, scripts, and other artifacts.
• Experience working with large datasets and developing queries or tooling to find meaningful activity.

Responsibilities

• Hunt for emerging exploitation activity, attacker infrastructure, and novel attacker behavior across VulnCheck's data.
• Turn discoveries into durable improvements to detections, queries, tooling, and automation.
• Investigate exploitation attempts, attacker payloads, binaries, infrastructure, and post-exploitation activity.
• Build tooling and automation to support threat hunting and large-scale analysis.
• Pivot across vulnerabilities, hosts, IPs, domains, payloads, and other infrastructure to uncover relationships and broader activity.
• Turn research findings into actionable threat intelligence for customers.
• Write customer-facing threat intelligence reports and technical blog posts.

Skills

Threat hunting

Threat intelligence

Network analysis

Detections development

Scripting/programming

Linux systems

Malware analysis

Large data analysis

Research independence

Tools

Suricata rules

Snort rules

Nuclei templates

Job description

VulnCheck Inc. is seeking a Principal Threat Hunter to discover and document real-world exploitation, and to turn findings into durable improvements to detection capabilities across our datasets.

You will operate across Canary Intelligence and Target Intelligence datasets, shaping the threat hunting program with substantial latitude. The role emphasizes research independence, building scalable tooling, and producing customer-facing intelligence and blog content.