Threat Hunter & Detection Engineer — Real-World Hunting at Scale

Mars Security; New York (NY); On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

Ground-floor opport.

Direct access to founders

Adversary research exposure

Competitive compensation

Job summary

Mars Security is seeking a Threat Hunter in New York to run real hunts and develop detection logic that closes gaps in customers' environments. You will work directly with founders and customers to shape the product, applying hands-on threat hunting, threat intelligence, and adversary research to detect and mitigate active campaigns.

This role emphasizes discovery of what a security stack would miss, with opportunities to influence platform strategy and detection engineering at scale.

Qualifications

• 5+ years hands-on threat hunting experience.
• Proven ability to write detection rules for real attacks.
• Strong data analysis skills for high-volume telemetry.
• Solid understanding of attacker TTPs and campaigns.
• Knowledge of infrastructure: networking, cloud, identity, endpoints.

Responsibilities

• Run threat hunts across customer environments using SIEM and EDR.
• Research adversary infrastructure, tactics, and tooling.
• Build and validate detection rules and hunt queries.
• Develop and maintain detection content across platforms.
• Analyze large datasets to surface anomalies and indicators.
• Contribute to platform with scalable hunting and detection practices.

Skills

Threat hunting

Detection engineering

Data analysis

TTP knowledge

Offensive security

Networking / Cloud

Python scripting

Self-learning

Customer-facing

Team collaboration

Tools

SIEM

EDR

Cloud platforms

Job description

Mars Security is seeking a Threat Hunter in New York to run real hunts and develop detection logic that closes gaps in customers' environments. You will work directly with founders and customers to shape the product, applying hands-on threat hunting, threat intelligence, and adversary research to detect and mitigate active campaigns.

This role emphasizes discovery of what a security stack would miss, with opportunities to influence platform strategy and detection engineering at scale.