Threat Specialist | Digital Threat Researcher

We’re Hiring:
Threat Hunting Specialist | Digital Threat Researcher

Employment Type: Full-Time

Level: Mid-Level to Senior

We are seeking a highly analytical, proactive, and security-focused Threat Hunting Specialist | Digital Threat Researcher to identify hidden cyber threats, investigate suspicious activities, and conduct in-depth research into emerging digital attack techniques. This role combines proactive threat hunting, cybersecurity intelligence, threat analysis, incident investigation, and security monitoring.

The successful candidate will work closely with security operations, incident response, malware research, and IT infrastructure teams to detect advanced threats, investigate potential compromises, analyze attacker behavior, and strengthen organizational security capabilities. The ideal candidate has a strong understanding of cyberattack methodologies, network security, endpoint monitoring, threat intelligence, and digital investigation techniques.

• Conduct proactive threat hunting activities to identify suspicious behavior and potential security incidents across enterprise environments.
• Analyze endpoint, network, cloud, and system telemetry to uncover hidden threats that may bypass conventional security controls.
• Investigate unusual system activities, unauthorized access attempts, suspicious processes, and abnormal network communications.
• Develop and execute threat hunting hypotheses based on known attack techniques, threat intelligence, and emerging cyber risks.
• Research advanced persistent threats (APTs), ransomware campaigns, phishing operations, and other sophisticated cyberattack activities.
• Analyze attacker tactics, techniques, and procedures (TTPs) to understand potential intrusion methods and operational patterns.
• Monitor security alerts, event logs, endpoint detection systems, and network monitoring platforms for indicators of malicious activity.
• Conduct investigations into potential data breaches, account compromises, lateral movement, and unauthorized data transfers.
• Correlate security events across multiple systems to identify relationships between suspicious activities and possible attack campaigns.
• Analyze indicators of compromise (IOCs), including malicious IP addresses, domains, file hashes, URLs, and suspicious behavioral patterns.
• Use threat intelligence platforms and external research sources to identify emerging threats and assess their relevance to organizational environments.
• Perform research into cybercriminal groups, threat actors, attack infrastructure, and evolving exploitation techniques.
• Conduct digital investigations to determine the scope, timeline, and potential impact of security incidents.
• Collaborate with incident response teams to investigate confirmed threats and support containment and remediation activities.
• Develop and refine threat hunting queries, detection rules, and analytical techniques to improve threat identification.
• Utilize security information and event management (SIEM) platforms to investigate logs and detect abnormal activity.
• Work with endpoint detection and response (EDR) tools to investigate suspicious processes, endpoint behaviors, and potential compromises.
• Analyze network traffic, DNS records, authentication events, and firewall logs to identify malicious communication patterns.
• Support the development of detection logic using tools and languages such as KQL, SPL, Sigma, YARA, or equivalent technologies.
• Map identified attack behaviors to established frameworks such as MITRE ATT&CK.
• Evaluate the effectiveness of existing security monitoring controls and recommend improvements.
• Conduct research into newly disclosed vulnerabilities, exploitation methods, and security weaknesses.
• Identify gaps in threat detection…