Threat Cybersecurity Engineer

Exiger; Richmond (VA); Hybrid; USD 120,000 - 150,000; Full time

Job summary

Exiger is seeking an experienced Threat Cybersecurity Engineer to strengthen security operations across a growing technology environment. You will focus on threat detection, hunting, incident response, and automation to improve visibility and scalable controls.

Work with Security, IT, engineering, cloud, and compliance teams to implement proactive defenses and drive improvements across endpoint, identity, cloud, and network security. This is a hybrid role in the Richmond, VA area.

Qualifications

• 7+ years of experience in security engineering/operations or related roles.
• Advanced experience with endpoint protection and EDR.
• Experience with SIEM administration and security investigations.
• Ability to develop and tune detections and differentiate real threats from false positives.
• Experience with structured threat hunts and MITRE ATT&CK mapping.

Responsibilities

• Administer and optimize endpoint detection, SIEM, and security monitoring capabilities.
• Monitor, triage, and investigate threats across endpoint, identity, cloud, apps, and network.
• Conduct proactive threat hunting using threat intel and behavioral analytics.
• Develop and tune detections, alerts, dashboards, and automated response workflows per MITRE ATT&CK.
• Identify and prioritize exposed assets, vulnerabilities, and risk-based remediation.
• Coordinate incident containment, remediation, and post-incident improvements.
• Maintain investigation playbooks, procedures, metrics, and exec reporting.
• Participate in security operations on-call rotation as required.

Skills

Security engineering

Security operations

Incident response

Threat detection

Threat hunting

MITRE ATT&CK

Vulnerability management

Endpoint protection

SIEM administration

Windows/Linux security

Job description

Exiger is the AI partner for supply chain and procurement automation. Its centralized 1EXIGER.AI platform allows organizations to manage their entire operating network, from parts to suppliers, regulators, and customers, through an autonomous agentic workforce that learns, adapts, and augments with every decision. The AI-native platform, combined with the largest supply chain knowledge asset, empowers 550+ global customers, including 150 Fortune 500 and 80+ government and defense industrial organizations, to act first. Exiger is FedRAMP authorized and a 2x Leader in Gartner Magic Quadrant for Supplier Risk Management.

Threat Cybersecurity Engineer

Summary

EXIGER is seeking an experienced Threat Cybersecurity Engineer to strengthen security operations and protect a growing technology environment. This hands-on role focuses on security monitoring, threat detection and hunting, incident response, attack-surface management, and security automation. The engineer will collaborate with Security, IT, engineering, cloud, and compliance teams to improve security visibility and implement scalable controls that support the company's continued growth.

Responsibilities

• Administer and optimize endpoint detection, SIEM, and security-monitoring capabilities.
• Monitor, triage, and investigate threats across endpoint, identity, cloud, application, and network environments.
• Conduct proactive threat hunting using threat intelligence, behavioral analytics, and attacker techniques.
• Develop and tune detection rules, alerts, dashboards, and automated response workflows aligned with MITRE ATT&CK.
• Identify and prioritize exposed assets, vulnerabilities, and other security weaknesses.
• Coordinate incident containment, remediation, recovery, root-cause analysis, and post-incident improvements.
• Maintain investigation playbooks, procedures, metrics, and executive reporting.
• Participate in the security operations on-call rotation as required.

Qualifications

• Seven or more years of experience in security engineering, security operations, incident response, threat detection, or a related discipline.
• Advanced experience with endpoint protection, endpoint detection and response, SIEM administration, and security investigations.
• Demonstrated ability to develop and tune detections, investigate complex alerts, and distinguish genuine threats from false positives.
• Experience conducting structured threat hunts and mapping attacker behavior to MITRE ATT&CK.
• Working knowledge of attack-surface management, vulnerability management, asset discovery, and risk-based remediation.
• Strong understanding of Windows, Linux, cloud, network, identity, and endpoint security.

Exiger is named a Leader in the Gartner Magic Quadrant for Supplier Risk Management, twice selected as one of Fast Company's 'Brands That Matter,' and recipient of the Third Party Risk Association's Innovator Award, Exiger's technology has been recognized by leading analyst evaluations and 50+ awards. Learn more at Exiger.com and follow Exiger on LinkedIn.

At Exiger, our values define how we work and why we lead. We are mission-inspired, imagination-driven, trust-anchored, and compassion-focused-committed to building technology that makes the world safer, more transparent, and more resilient.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability or protected veteran status, or any other legally protected basis, in accordance with applicable law.

Exiger's hybrid work policy is periodically reviewed and adjusted to align with evolving business needs.

Exiger is named a Leader in the GartnerMagic Quadrant for Supplier Risk Management, twice selected as one of Fast Company's 'Brands That Matter,' and recipient of the Third Party Risk Association's Innovator Award, Exiger's technology has been recognized by leading analyst evaluations and 50+ awards. Learn more atExiger.comand follow Exiger onLinkedIn.

At Exiger, our values define how we work and why we lead. We are mission-inspired, imagination-driven, trust-anchored, and compassion-focused-committed to building technology that makes the world safer, more transparent, and more resilient.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability or protected veteran status, or any other legally protected basis, in accordance with applicable law.

Exiger's hybrid work policy is periodically reviewed and adjusted to align with evolving business needs.