Network Security Analyst
Position Overview
We are seeking a highly skilled and proactive Senior Threat Hunter to join our cybersecurity team. In this role, you will go beyond automated alerts to identify sophisticated malicious activity and Advanced Persistent Threats (APTs). You will be responsible for developing hypothesis-driven hunts, analyzing complex telemetry across diverse environments, and translating your findings into robust detection logic to stay ahead of evolving cyber threats.
Key Responsibilities
- Proactive Threat Hunting: Conduct deep-dive hunting activities to identify malicious activity and indicators of compromise (IoCs) that bypass automated security tools.
- Hypothesis Development: Design and execute hunts based on the latest threat intelligence, adversary TTPs, and organizational risk profiles.
- Telemetry Analysis: Analyze endpoint, network, identity, and cloud telemetry to detect anomalous or suspicious behavior.
- Incident Investigation: Validate potential security incidents, determine root causes, and assess the overall scope and impact of threats.
- Cross-Functional Collaboration: Partner with Incident Response, SOC, and Detection Engineering teams to support containment, eradication, and recovery.
- Detection Engineering: Convert hunt findings into actionable detection logic, alerts, and analytics for SIEM, EDR, and NDR platforms.
- Reporting & Documentation: Maintain detailed methodologies and findings in formal reports and shared knowledge repositories.
- Continuous Improvement: Support purple team activities, tabletop exercises, and adversary simulations to harden our security posture.
Candidate QualificationsMinimum Requirements
8+ Years of Experience In:
- Adversary Tactics: Deep understanding of attacker TTPs and the MITRE ATT&CK framework.
- Telemetry Analysis: Analyzing logs from SIEM, EDR/XDR, network security, and cloud environments (AWS/Azure/GCP).
- Technical Proficiency: Mastery of query languages (KQL, SQL, SPL, etc.) and scripting for automated hunting.
- OS Internals: Strong knowledge of Windows and Linux operating systems, specifically regarding attack vectors and persistence.
- Cloud Security: Expertise in mitigating data breaches, account hijacking, and DoS attacks within cloud contexts.
- Standards & Frameworks: Practical experience applying NIST standards to threat analysis and risk mitigation.
- Forensics: Conducting digital forensic investigations to determine attack origins and prevent recurrence.
- Policy Development: Creating and updating security policies for public, private, and hybrid cloud environments.
Preferred Skills & Certifications
- Certifications: GSEC, CEH, CISA, CCSP, or AWS Solutions Architect/Cloud Security certifications.
- Tooling Expertise: Experience with EDR (Crowdstrike, SentinelOne), Email Threat Management (Proofpoint, MimeCast), and SIEM design (Splunk, Rapid7).
- Advanced Security: Familiarity with DLP/CASB (Netskope, Symantec) and Cloud Network Security (ZScaler, Palo Alto, Cisco Umbrella).
Employment Type
Contractor
Job Location
Austin, Texas, 78741, United States
Date posted
February 15, 2026