Threat Hunter - Chandler, Az

Threat Hunter

A leading financial services enterprise in Chandler, Arizona is seeking a Threat Hunter to proactively identify, investigate, and respond to cybersecurity risks across its technology environment. The position will combine threat hunting, SOC investigation, and response responsibilities with extensive analysis of endpoint and security telemetry.

This individual will also review security findings uncovered through AI-assisted scanning and determine whether additional investigation or remediation is necessary. The goal of the role is to turn large amounts of security data into actionable findings that can be addressed by cybersecurity and technology teams.

• Experience working in security operations or incident investigation
• Strong working knowledge of Splunk
• Familiarity with additional SIEM technologies
• Experience working with enterprise log aggregation
• Hands-on knowledge of EDR platforms
• Ability to investigate suspicious endpoint and network activity
• Understanding of security vulnerabilities and common attack patterns
• Experience supporting cyber response activities

• Background in threat hunting or detection engineering
• Familiarity with attacker tactics, techniques, and procedures
• MITRE ATT&CK knowledge
• Experience reviewing vulnerability or penetration-testing findings
• Understanding of web application threats
• Experience investigating certificates, identities, or authentication activity
• Exposure to security automation and AI-driven security analysis
• Experience scripting with Python
• Familiarity with structured and unstructured security data

• Hunt for threats across security logs and endpoint telemetry
• Review patterns and anomalies identified through SIEM platforms
• Perform detailed EDR investigations
• Analyze findings produced through AI-based security scanning
• Research suspicious activity to determine whether it represents a legitimate threat
• Validate vulnerability and application-security findings
• Perform deeper analysis of potentially compromised accounts, systems, or certificates
• Gather supporting evidence across multiple security sources
• Recommend containment and remediation steps
• Coordinate investigations with SOC, incident response, application security, and engineering teams
• Help improve future detection and response workflows

• 12+ month contract
• Competitive hourly compensation

• Medical Insurance
• Dental Benefits
• Vision Benefits
• Paid Time Off (PTO)
• 401(k)