Adversary Hunter (43)

Summary

To support a mission-driven team, the full-time remote Associate Principal Adversary Hunter will independently track and disrupt threats targeting ICS/OT environments, author intelligence products, and enhance analytical methodologies while collaborating across functions.Key responsibilitiesProvide expert-level coverage for Threat Groups and Temporary Activity Threats (TATs), authoring intelligence reports and representing the team in publications and customer engagementsChampion cross-team collaboration to improve intelligence flow and enhance reporting pipelinesLead threat hunting efforts during incident response engagements and mentor junior analysts to elevate team capabilitiesRequired qualifications5+ years of experience in threat intelligence, adversary tracking, or threat hunting with a focus on ICS/OT environmentsProven ability to independently author finished intelligence products with minimal oversightExpert-level knowledge of the Diamond Model, Kill Chain stages, and MITRE ATT&CK for ICSHands-on proficiency with network telemetry tools and file analysis platforms, as well as advanced knowledge of Synapse and Storm Query LanguageExperience leading threat hunting operations during live incident response engagements

Job Description

To support a mission-driven team, the full-time remote Associate Principal Adversary Hunter will independently track and disrupt threats targeting ICS/OT environments, author intelligence products, and enhance analytical methodologies while collaborating across functions.Key responsibilitiesProvide expert-level coverage for Threat Groups and Temporary Activity Threats (TATs), authoring intelligence reports and representing the team in publications and customer engagementsChampion cross-team collaboration to improve intelligence flow and enhance reporting pipelinesLead threat hunting efforts during incident response engagements and mentor junior analysts to elevate team capabilitiesRequired qualifications5+ years of experience in threat intelligence, adversary tracking, or threat hunting with a focus on ICS/OT environmentsProven ability to independently author finished intelligence products with minimal oversightExpert-level knowledge of the Diamond Model, Kill Chain stages, and MITRE ATT&CK for ICSHands-on proficiency with network telemetry tools and file analysis platforms, as well as advanced knowledge of Synapse and Storm Query LanguageExperience leading threat hunting operations during live incident response engagements