Threat Hunt Senior Associate

Job Summary (List Format):

- Hybrid role based in Tampa, FL (3 days onsite per week)
- Finance industry client; no visa restrictions
- Interviews conducted via video
- Anticipated start in 2-4 weeks
- Minimum 3 years of experience in Threat Hunting, Detection Engineering, Incident Response, SOC investigations, or similar cybersecurity functions
- Conduct and document hypothesis-based threat hunts
- Analyze security telemetry across endpoint, identity, network, and cloud environments
- Strong understanding of MITRE ATT&CK and common adversary tactics, techniques, and procedures
- Proficient with at least one security query language/platform (e.g., KQL, Splunk SPL, Elastic/Kibana, Google SecOps/Chronicle)
- Experience with SIEM, EDR/XDR platforms, and security detection development
- Knowledge of credential attacks, PowerShell/LOLBins, persistence techniques, command-and-control activity, and network anomalies
- Familiarity with cloud and container security, including API activity, identity abuse, and Kubernetes threats
- Experience developing/tuning detections (Sigma, YARA, SIEM rules, or EDR-based controls)
- Strong investigative, analytical, documentation, and communication skills required
- Background check required; drug screen not required
- All candidate submissions must include a LinkedIn profile