Threat Hunter

Job Description

WarCollar Industries is seeking a highly motivated Cyber Threat Hunter to proactively identify, investigate, and mitigate sophisticated cyber threats across a large-scale enterprise environment. This role is ideal for a security professional who enjoys going beyond traditional alert response to uncover adversary activity, develop hunting hypotheses, and identify previously undetected threats.

The Cyber Threat Hunter will leverage hypothesis-based hunting methodologies, including HMM-4, and the MITRE ATT&CK framework to analyze adversary tactics, techniques, and procedures (TTPs). The position offers the opportunity to work alongside experienced professionals across endpoint security, network operations, offensive security, threat intelligence, cloud engineering, and data science.

,

Required Skills

• Conduct proactive, hypothesis-driven threat hunts using HMM-4 methodologies and the MITRE ATT&CK framework.
• Develop and refine threat-hunting hypotheses using threat intelligence, internal security data, and analysis of adversary TTPs.
• Analyze security telemetry from SIEM, EDR, network traffic, endpoint systems, cloud environments, logs, and other enterprise data sources.
• Identify indicators of compromise, anomalous activity, and emerging attack patterns that may indicate malicious activity.
• Perform detailed investigations to determine the scope, impact, root cause, and potential business risk associated with identified threats.
• Map observed adversary activity to MITRE ATT&CK techniques and identify gaps in existing defensive coverage.
• Collaborate with endpoint, network, offensive security, threat intelligence, cloud, and data science teams to develop a comprehensive understanding of threats.
• Document investigative objectives, hunting methodologies, findings, and investigative progress.
• Develop detailed reports and communicate technical findings, risk assessments, and remediation recommendations to technical and non-technical audiences.
• Recommend and develop enhanced detections and defensive measures when gaps are identified.
• Stay current on emerging threats, attack techniques, vulnerabilities, security technologies, and industry best practices.
• Contribute to knowledge sharing and continuous improvement of enterprise threat-hunting capabilities.
  
  

,

Desired Skills

• Minimum of 3 years of experience as a cybersecurity analyst, incident responder, threat hunter, or in a closely related cybersecurity discipline; 4-6 years preferred.
• Strong experience with hypothesis-based threat hunting and the HMM-4 methodology.
• Demonstrated proficiency with the MITRE ATT&CK framework and the ability to map adversary TTPs to observed activity.
• Hands-on experience with SIEM platforms, EDR solutions, network traffic analysis tools, and other security monitoring technologies.
• Strong understanding of enterprise network protocols, endpoint security, and common attack methodologies.
• Experience analyzing security data across cloud environments such as AWS and/or Azure.
• Strong analytical and problem-solving skills with the ability to investigate complex or ambiguous security events.
• Ability to clearly communicate complex technical findings, investigative conclusions, and recommended actions to both technical and non-technical audiences.
• Relevant cybersecurity certifications such as GCIH, CTIA, CThH, or comparable credentials are highly desirable.
• Ability to work effectively in a collaborative, mission-focused environment and adapt to evolving threat landscapes.
  
  

,

About WarCollar Industries

About us:

WarCollar Industries, LLC is a veteran-owned small business. We maintain a team of cybersecurity experts committed to protecting complicated data and distribution systems and providing decision makers with the most accurate assessment of residual risk possible. We work with our clients to solve the toughest challenges in the ever-evolving digital landscape. Services include network defense, computer network attack, secure network design, penetration testing and vulnerability assessment. WarCollar enables its clients to find, fix, stop, and ultimately solve cybersecurity problems across their entire enterprise.

WarCollar offers generous benefits including: Medical insurance premium coverage; PTO based on billable hours; federal holidays plus your birthday; matching 401k, education reimbursement plus paid training days; performance bonuses; referral bonuses; government shutdown protection; monthly team building events plus two major social events annually.

WarCollar Industries, LLC is an equal opportunity employer. WarCollar does not discriminate in employment based upon race, color, religion, sex (including pregnancy and gender identity), national origin, political affiliation, sexual orientation, marital status, disability, genetic information, age, membership in an employee organization, retaliation, parental status, status as a protected military veteran, or other non-merit factor.