Threat Cybersecurity Engineer

Exiger; New York (NY); Hybrid; USD 140,000 - 210,000; Full time

Job summary

Exiger is seeking a Threat Cybersecurity Engineer to enhance security operations across a growing technology environment. This hands-on role emphasizes threat detection, hunting, incident response, and scalable control implementations in collaboration with security, IT, engineering, cloud, and compliance teams.

The ideal candidate has extensive experience in security engineering, SIEM and EDR, and a track record of reducing risk through sophisticated detections and response workflows.

Qualifications

• Seven or more years of experience in security engineering, security operations, incident response, threat detection, or a related discipline.
• Advanced experience with endpoint protection, endpoint detection and response, SIEM administration, and security investigations.
• Experience conducting structured threat hunts and mapping attacker behavior to MITRE ATT&CK.

Responsibilities

• Administer and optimize endpoint detection, SIEM, and security-monitoring capabilities.
• Monitor, triage, and investigate threats across endpoint, identity, cloud, application, and network environments.
• Conduct proactive threat hunting using threat intelligence, behavioral analytics, and attacker techniques.
• Develop and tune detection rules, alerts, dashboards, and automated response workflows aligned with MITRE ATT&CK.
• Identify and prioritize exposed assets, vulnerabilities, and other security weaknesses.
• Coordinate incident containment, remediation, recovery, root-cause analysis, and post-incident improvements.
• Maintain investigation playbooks, procedures, metrics, and executive reporting.
• Participate in the security operations on-call rotation as required.

Skills

Threat hunting

MITRE ATT&CK

SIEM

EDR

Incident response

Threat detection

Cloud security

Endpoint security

Tools

MITRE ATT&CK

Job description

Exiger is the AI partner for supply chain and procurement automation. Its centralized 1EXIGER.AI platform allows organizations to manage their entire operating network, from parts to suppliers, regulators, and customers, through an autonomous agentic workforce that learns, adapts, and augments with every decision. The AI-native platform, combined with the largest supply chain knowledge asset, empowers 550+ global customers, including 150 Fortune 500 and 80+ government and defense industrial organizations, to act first. Exiger is FedRAMP authorized and a 2x Leader in Gartner Magic Quadrant for Supplier Risk Management.

Threat Cybersecurity Engineer

Summary

EXIGER is seeking an experienced Threat Cybersecurity Engineer to strengthen security operations and protect a growing technology environment. This hands-on role focuses on security monitoring, threat detection and hunting, incident response, attack-surface management, and security automation. The engineer will collaborate with Security, IT, engineering, cloud, and compliance teams to improve security visibility and implement scalable controls that support the company's continued growth.

Responsibilities

• Administer and optimize endpoint detection, SIEM, and security-monitoring capabilities.
• Monitor, triage, and investigate threats across endpoint, identity, cloud, application, and network environments.
• Conduct proactive threat hunting using threat intelligence, behavioral analytics, and attacker techniques.
• Develop and tune detection rules, alerts, dashboards, and automated response workflows aligned with MITRE ATT&CK.
• Identify and prioritize exposed assets, vulnerabilities, and other security weaknesses.
• Coordinate incident containment, remediation, recovery, root-cause analysis, and post-incident improvements.
• Maintain investigation playbooks, procedures, metrics, and executive reporting.
• Participate in the security operations on-call rotation as required.

Qualifications

• Seven or more years of experience in security engineering, security operations, incident response, threat detection, or a related discipline.
• Advanced experience with endpoint protection, endpoint detection and response, SIEM administration, and security investigations.
• Demonstrated ability to develop and tune detections, investigate complex alerts, and distinguish genuine threats from false positives.
• Experience conducting structured threat hunts and mapping attacker behavior to MITRE ATT&CK.
• Working knowledge of attack-surface management, vulnerability management, asset discovery, and risk-based remediation.
• Strong understanding of Windows, Linux, cloud, network, identity, and endpoint security.

Exiger is named a Leader in the Gartner Magic Quadrant for Supplier Risk Management, twice selected as one of Fast Company's 'Brands That Matter,' and recipient of the Third Party Risk Association's Innovator Award, Exiger's technology has been recognized by leading analyst evaluations and 50+ awards. Learn more at Exiger.com and follow Exiger on LinkedIn.

At Exiger, our values define how we work and why we lead. We are mission-inspired, imagination-driven, trust-anchored, and compassion-focused-committed to building technology that makes the world safer, more transparent, and more resilient.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability or protected veteran status, or any other legally protected basis, in accordance with applicable law.

Exiger's hybrid work policy is periodically reviewed and adjusted to align with evolving business needs.

Exiger is named a Leader in the GartnerMagic Quadrant for Supplier Risk Management, twice selected as one of Fast Company's 'Brands That Matter,' and recipient of the Third Party Risk Association's Innovator Award, Exiger's technology has been recognized by leading analyst evaluations and 50+ awards. Learn more atExiger.comand follow Exiger onLinkedIn.

At Exiger, our values define how we work and why we lead. We are mission-inspired, imagination-driven, trust-anchored, and compassion-focused-committed to building technology that makes the world safer, more transparent, and more resilient.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability or protected veteran status, or any other legally protected basis, in accordance with applicable law.

Exiger's hybrid work policy is periodically reviewed and adjusted to align with evolving business needs.