Threat Hunter

Arctiq: Intelligent Architecture; Nashville, Northern (TN, KY); Hybrid; USD 120,000 - 160,000; Full time

Benefits offered by this job

Competitive salary and incentives

Outstanding health, dental, and vision

Retirement savings plan with employer‑

Flexible work schedule and remote work

Professional development and training

Collaborative inclusive culture

Job summary

Arctiq: Intelligent Architecture is seeking a Threat Hunter to join its advanced security team within a fast-paced MSSP environment. You will proactively identify cyber threats across client environments by combining threat intelligence, analytics, and expert intuition.

You will model attacker behavior, test hypotheses, and develop detection content to improve threat visibility. Strong experience with SIEM/EDR, cloud security, and incident response is required for success in this role.

Qualifications

• Bachelor's degree or equivalent practical experience.
• 3+ years hands-on threat hunting, incident response, SOC analysis, or threat intelligence.
• Solid understanding of Windows and Linux OS and authentication protocols.
• Familiarity with cloud security platforms (AWS, Azure, GCP).
• Strong grasp of security frameworks (MITRE ATT&CK, NIST).
• Proficiency with EDR and SIEM tools (CrowdStrike, SentinelOne, Splunk, QRadar).
• Knowledge of networking fundamentals (protocols, firewalls, routing).
• Experience with malware analysis, packet capture, and host/network forensics.
• Scripting or automation (Python, PowerShell) for hunt support and data enrichment.
• Customer-focused with strong communication and analytical skills.

Responsibilities

• Perform proactive threat hunting across multi-tenant client environments using SIEM, EDR, NDR, and telemetry sources.
• Model attacker behavior and test hypotheses against client data using threat intel and baselines.
• Analyze IOCs and behavior patterns to uncover stealthy threats.
• Investigate anomalies and provide deep-dive analysis for incidents.
• Create and tune detection content (SIEM rules, signatures) to improve visibility.
• Document hunt processes, findings, and incident recommendations for stakeholders.
• Assist in incident response efforts including containment, eradication, and recovery.
• Recommend security control improvements based on observed threats and outcomes.
• Collaborate with internal teams to improve MSSP threat detection framework.
• Engage with clients during onboarding, reviews, or post-incident briefings.

Skills

Threat hunting

Incident response

SOC analysis

Threat intel

Cloud security

MITRE ATT&CK

EDR/SIEM

Python/PowerShell

Networking basics

Communication

Education

Bachelor's degree in CS/Cybersecurity/Information Systems

Tools

CrowdStrike

SentinelOne

Splunk

QRadar

Job description

Company Overview

Arctiq is a global, intelligence-driven technology services company delivering professional and managed services across Hybrid Cloud Infrastructure, Networking & Connected Experiences, Cybersecurity, Data & AI, Autonomous Operations & Intelligence, and Enterprise Service Management. We help organizations operate, secure, and modernize complex environments by unifying infrastructure, networking, data, security, automation, and observability under a single, integrated operating model. Our work focuses on helping customers reduce operational friction, improve resilience, and make better, faster decisions as their environments evolve. Arctiq builds on decades of industry expertise and a customer-centric ethos to deliver exceptional value to clients across diverse industries.

Position Overview

Arctiq is seeking a Threat Hunter to join our advanced security team within a fast-paced MSSP environment. You will proactively identify cyber threats across a variety of client environments by combining threat intelligence, behavioral analytics, and expert intuition. This role requires a deep understanding of attacker techniques, endpoint/network telemetry, and experience working across diverse technology stacks. You will play a critical role in enhancing threat detection capabilities and advising clients on how to improve their security posture.

Core Responsibilities

• Perform proactive threat hunting across multi-tenant client environments using SIEM, EDR, NDR, and other telemetry sources.
• Drive proactive threat hunting by modeling attacker behavior and testing hypotheses against client data using threat intel and contextual baselines.
• Analyze indicators of compromise (IOCs) and behavior patterns to uncover stealthy threats.
• Investigate anomalies surfaced through tools or analyst escalations and provide deep-dive analysis.
• Create and tune detection content (SIEM rules, correlation logic, signatures) to improve threat visibility.
• Document hunt processes, findings, and incident recommendations for internal stakeholders and clients.
• Assist in incident response efforts including containment, eradication, and recovery.
• Recommend security control improvements based on observed threats and hunting outcomes.
• Partner across internal security teams to enhance detection strategies and drive continuous improvement of the MSSP threat detection framework.
• Engage with clients during onboarding, security reviews, or post-incident briefings.
• Maintain and enhance security solutions such as firewalls, IDS/IPS, DLP, vulnerability scanners, PAM, and endpoint protection tools for clients.
• Monitor the evolving threat landscape and incorporate the latest intelligence into proactive threat hunting efforts.

Qualifications

• Bachelor’s degree/Diploma in Computer Science, Cybersecurity, Information Systems, or a related field or equivalent practical experience.
• 3+ years of hands-on experience in threat hunting, incident response, SOC analysis, or threat intelligence.
• Solid understanding of Windows and Linux operating systems and authentication protocols.
• Familiarity with cloud security platforms (AWS, Azure, GCP).
• Strong grasp of security frameworks (MITRE ATT&CK, NIST, etc.).
• Proficiency with EDR and SIEM tools (e.g., CrowdStrike, SentinelOne, Splunk, QRadar).
• Knowledge of networking fundamentals (protocols, firewalls, routing, etc.)
• Experience with malware analysis, packet capture analysis, and host/network forensics.
• Skilled in scripting or automation (Python, PowerShell, etc.) for hunt support and data enrichment.
• Customer-focused mindset with the ability to communicate effectively and confidently with technical and non-technical stakeholders.
• Strong analytical, troubleshooting, and problem-solving skills.
• High attention to detail, discretion, and integrity in handling sensitive client data.
• Ability to manage multiple incidents and prioritize tasks under pressure.
• Self-starter with a passion for continuous learning and cybersecurity excellence.
• Hands-on incident response or SOC experience in a service provider environment.
• Relevant certifications such as GCIH, GCFA, GCIA, Security+, CEH, or CISSP.

Benefits

• Competitive salary and performance-based incentives
• Outstanding health, dental, and vision insurance plans
• Retirement savings plan with employer matching
• Flexible work schedule and remote work options
• Professional development and training opportunities

• Collaborative and inclusive work culture with opportunities for career growth

Arctiq is an equal opportunity employer. If you need any accommodations or adjustments throughout the interview process and beyond, please let us know. We celebrate our inclusive work environment and welcome members of all backgrounds and perspectives to apply.

We thank you for your interest in joining the Arctiq team! While we welcome all applicants, only those who are selected for an interview will be contacted.