Threat Hunter & SIEM Automation Specialist

Dentons Canada; Chicago (IL); On-site; USD 84,000 - 108,000; Full time

Benefits offered by this job

Medical

Dental

Vision

401(k)

Paid time off

Discretionary bonuses

Job summary

Dentons US LLP is seeking a Threat Analyst to proactively hunt threats, tune SIEM use cases, and lead investigations of security events across client environments. You will collaborate with teams to enhance security operations, participate in incident response, and help automate detection and response workflows.

The role requires 2+ years in cyber intelligence or threat hunting, strong SIEM and EDR skills, and familiarity with MITRE ATT&CK.

Qualifications

• Bachelor’s degree or diploma in Computer Science, Information Security, or related field.
• Minimum 2 years of experience in Cyber Intelligence or Threat Hunting, preferably in a CIRT/SOC; hands-on SIEM content and automation.
• Direct experience with SIEM, vulnerability scanners, anti-virus solutions, and EDRs.
• Strong knowledge of threat intelligence and threat hunting including MITRE ATT&CK, kill chain, and IOC lifecycle management.
• Experience with SIEM platforms (e.g., Splunk, Microsoft Sentinel, Elastic) and SOAR platforms for playbooks.
• Scripting proficiency in Python, PowerShell or shell is a plus.

Responsibilities

• Hunt for threats not detected by existing alerts using dashboards and data analysis.
• Develop new SIEM use cases and attack vectors to improve detection.
• Investigate security events and incidents with defined IR procedures.
• Triage and operationalize threat intelligence from various sources.
• Correlate threat intel with internal telemetry to guide hunts.
• Create regular threat hunting and intelligence reports with findings and improvements.
• Develop automation and SOAR playbooks to streamlineresponse workflows.
• Contribute to vulnerability management through risk-based remediations.

Skills

Threat hunting

SIEM automation

Incident response

MITRE ATT&CK

Scripting (Python/PowerShell)

EDR tooling

Education

Bachelor's degree in Computer Science or Information Security

Tools

Splunk

Microsoft Sentinel

Elastic

CrowdStrike

Defender for Endpoint

Job description

Dentons US LLP is seeking a Threat Analyst to proactively hunt threats, tune SIEM use cases, and lead investigations of security events across client environments. You will collaborate with teams to enhance security operations, participate in incident response, and help automate detection and response workflows.

The role requires 2+ years in cyber intelligence or threat hunting, strong SIEM and EDR skills, and familiarity with MITRE ATT&CK.