Cybersecurity Threat Hunter - REMOTE

Binary Defense is seeking a Threat Hunter to join our Threat Hunting Team. This role is built for someone who can hit the ground running: tracking threat actor techniques as they break, turning that intelligence into original research, and building the hunts that surface those threats across client environments.

The Threat Hunter position requires an experienced, analytical person who understands the techniques threat actors use to compromise systems and evade detection. A successful candidate will study those techniques, translate them into hunting and detection logic across multiple SIEM and EDR platforms, and clearly communicate findings to clients. The work spans researching breaking threat intelligence, hands-on analysis, detection engineering, and written communication, in a client-facing environment.

Hunts are delivered across EDR and SIEM platforms including Microsoft Defender, Sentinel, Splunk, and CrowdStrike. Threat Hunters produce client deliverables each week, with opportunities to publish original research as blog posts and to present research at security conferences.

Responsibilities

· Track emerging threat actor techniques from breaking research, threat intelligence reporting, and firsthand observation, and assess their relevance to client environments.

· Develop original research from observed malware and threat actor TTPs, including extraction of indicators of compromise (IOCs) and detection opportunities.

· Build and tune client-facing threat hunts as queries across customer EDR and SIEM platforms

· Serve as a technical point of contact for clients, clearly communicating hunt findings, methodology, and recommendations to improve their security posture.

· Perform static and dynamic malware analysis to understand malicious behavior, execution flow, and common evasion techniques.

· Analyze telemetry, logs, and alerts to identify suspicious behavior across Windows, Linux, and macOS.

· Work closely with Threat Hunters and SOC analysts to support investigations and deliver technical findings.

· Keep current on the latest threat actor techniques and cybersecurity developments relevant to defending client networks.

· Support and mentor less experienced team members as you grow in the role.