Senior Threat Hunter & Incident-Response Engineer

Exiger; Richmond (VA); Hybrid; USD 120,000 - 150,000; Full time

Job summary

Exiger is seeking an experienced Threat Cybersecurity Engineer to strengthen security operations across a growing technology environment. You will focus on threat detection, hunting, incident response, and automation to improve visibility and scalable controls.

Work with Security, IT, engineering, cloud, and compliance teams to implement proactive defenses and drive improvements across endpoint, identity, cloud, and network security. This is a hybrid role in the Richmond, VA area.

Qualifications

• 7+ years of experience in security engineering/operations or related roles.
• Advanced experience with endpoint protection and EDR.
• Experience with SIEM administration and security investigations.
• Ability to develop and tune detections and differentiate real threats from false positives.
• Experience with structured threat hunts and MITRE ATT&CK mapping.

Responsibilities

• Administer and optimize endpoint detection, SIEM, and security monitoring capabilities.
• Monitor, triage, and investigate threats across endpoint, identity, cloud, apps, and network.
• Conduct proactive threat hunting using threat intel and behavioral analytics.
• Develop and tune detections, alerts, dashboards, and automated response workflows per MITRE ATT&CK.
• Identify and prioritize exposed assets, vulnerabilities, and risk-based remediation.
• Coordinate incident containment, remediation, and post-incident improvements.
• Maintain investigation playbooks, procedures, metrics, and exec reporting.
• Participate in security operations on-call rotation as required.

Skills

Security engineering

Security operations

Incident response

Threat detection

Threat hunting

MITRE ATT&CK

Vulnerability management

Endpoint protection

SIEM administration

Windows/Linux security

Job description

Exiger is seeking an experienced Threat Cybersecurity Engineer to strengthen security operations across a growing technology environment. You will focus on threat detection, hunting, incident response, and automation to improve visibility and scalable controls.

Work with Security, IT, engineering, cloud, and compliance teams to implement proactive defenses and drive improvements across endpoint, identity, cloud, and network security. This is a hybrid role in the Richmond, VA area.