Threat Hunter

CMK Resources is seeking an experienced Threat Hunter to proactively identify threats, vulnerabilities, and sophisticated adversary activity within a large enterprise environment. This person will work as part of an existing security team and help strengthen the organization’s threat-hunting processes, playbooks, and detection capabilities.

This is a hands-on individual contributor role focused primarily on proactive threat identification and risk reduction.

• Conduct proactive threat hunts across Windows and Linux environments
• Identify suspicious behavior, attack patterns, vulnerabilities, and emerging risks
• Develop repeatable hunting methodologies, processes, and playbooks
• Investigate endpoint, identity, cloud, and security-event data
• Use Microsoft Sentinel and Crowd Strike to analyze potential threats
• Translate hunting findings into durable detections and security improvements
• Support detection engineering and continuous tuning
  
  Document findings and communicate risk to technical stakeholders
• Recommend actions that proactively reduce security exposure

• Hands-on enterprise threat-hunting experience
• Strong knowledge of Windows and Linux security
• Experience with Microsoft Sentinel
• Experience with Crowd Strike
• Understanding of attacker tactics, techniques, and procedures
• Experience developing threat-hunting processes or playbooks
• Ability to connect hunting findings to detection engineering
• Strong investigation, analysis, and documentation skills

• KQL experience
• Experience building and tuning production detections
• Malware analysis or reverse-engineering experience
• Experience with in a Microsoft-focused security environment