U

University of Maryland Global Campus

Cybersecurity Threat Hunter - Security Operations

Security Operations & Incident ResponseUpdated on Nov 14
Full-timeAdelphi, MD, USA$120k - $135k

About the Job

Requirements

  • Strong knowledge of threat actor tactics, techniques, and procedures (TTPs), and experience using frameworks such as MITRE ATT&CK.
  • Proficiency with endpoint detection and response (EDR) tools, security information and event management (SIEM) platforms, and threat intelligence platforms.
  • Ability to develop detection logic using scripting or query languages such as PowerShell, Bash, or Python.
  • Experience with log and packet analysis, endpoint forensics, and malware reverse engineering.
  • In-depth understanding of operating system internals (Windows and Linux), network protocols, and cloud infrastructure (AWS and Azure).
  • Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, or a related field, or equivalent experience.
  • Minimum of 6–8 years of relevant cybersecurity experience, including at least 5 years focused on threat hunting, threat intelligence, or incident response.

Responsibilities

  • Lead proactive threat hunting across endpoint, network, and cloud environments to detect anomalous behaviors and emerging threats.
  • Analyze security logs to identify patterns of malicious activity and Indicators of Compromise (IOCs) using SIEM and EDR platforms, augmented with threat intelligence feeds.
  • Develop and refine hypotheses for hunting campaigns based on the current threat landscape and adversary TTPs, including MITRE ATT&CK.
  • Collaborate with the Information Security team and cross-functional teams to triage, escalate, and respond to identified threats.
  • Design and implement custom detection logic and rules to improve threat detection within SIEM tools.
  • Analyze phishing emails, malicious files, and other threat artifacts as needed.
  • Develop documentation, hunting playbooks, and knowledge-transfer materials for junior analysts and other stakeholders.
  • Produce reports following threat assessments, highlighting recommendations to improve security.
  • Provide consultation on threat hunting methodologies and cyber adversary techniques.
  • Research current security threats, vulnerabilities, and attack techniques.
  • Mentor and guide tier 1 engineers, fostering skill development and knowledge sharing.

Desired Qualifications

  • GIAC Cyber Threat Intelligence (GCTI) certification.
  • GIAC Certified Incident Handler (GCIH) certification.
  • GIAC Advanced Threat Hunting (GATH) certification.
  • Certified Threat Intelligence Analyst (CTIA) certification.
  • OSCP or similar offensive security certification.

About the Company

Company size
Not listed
Company stage
Not listed
Total funding
Not listed
Headquarters
Not listed
Founded
Not listed

Recently Posted Jobs

Explore more opportunities at University of Maryland Global Campus

See more jobs