Threat Hunter

Summary

CMK Resources is seeking an experienced Threat Hunter to proactively identify threats, vulnerabilities, and sophisticated adversary activity within a large enterprise environment. This person will work as part of an existing security team and help strengthen the organization's threat-hunting processes, playbooks, and detection capabilities.This is a hands-on individual contributor role focused primarily on proactive threat identification and risk reduction.ResponsibilitiesConduct proactive threat hunts across Windows and Linux environmentsIdentify suspicious behavior, attack patterns, vulnerabilities, and emerging risksDevelop repeatable hunting methodologies, processes, and playbooksInvestigate endpoint, identity, cloud, and security-event dataUse Microsoft Sentinel and CrowdStrike to analyze potential threatsTranslate hunting findings into durable detections and security improvementsSupport detection engineering and continuous tuningDocument findings and communicate risk to technical stakeholdersRecommend actions that proactively reduce security exposureRequired QualificationsHands-on enterprise threat-hunting experienceStrong knowledge of Windows and Linux securityExperience with Microsoft SentinelExperience with CrowdStrikeUnderstanding of attacker tactics, techniques, and proceduresExperience developing threat-hunting processes or playbooksAbility to connect hunting findings to detection engineeringStrong investigation, analysis, and documentation skillsPreferred QualificationsKQL experienceExperience building and tuning production detectionsMalware analysis or reverse-engineering experienceExperience within a Microsoft-focused security environment#J-18808-Ljbffr

Job Description

CMK Resources is seeking an experienced Threat Hunter to proactively identify threats, vulnerabilities, and sophisticated adversary activity within a large enterprise environment. This person will work as part of an existing security team and help strengthen the organization's threat-hunting processes, playbooks, and detection capabilities.This is a hands-on individual contributor role focused primarily on proactive threat identification and risk reduction.ResponsibilitiesConduct proactive threat hunts across Windows and Linux environmentsIdentify suspicious behavior, attack patterns, vulnerabilities, and emerging risksDevelop repeatable hunting methodologies, processes, and playbooksInvestigate endpoint, identity, cloud, and security-event dataUse Microsoft Sentinel and CrowdStrike to analyze potential threatsTranslate hunting findings into durable detections and security improvementsSupport detection engineering and continuous tuningDocument findings and communicate risk to technical stakeholdersRecommend actions that proactively reduce security exposureRequired QualificationsHands-on enterprise threat-hunting experienceStrong knowledge of Windows and Linux securityExperience with Microsoft SentinelExperience with CrowdStrikeUnderstanding of attacker tactics, techniques, and proceduresExperience developing threat-hunting processes or playbooksAbility to connect hunting findings to detection engineeringStrong investigation, analysis, and documentation skillsPreferred QualificationsKQL experienceExperience building and tuning production detectionsMalware analysis or reverse-engineering experienceExperience within a Microsoft-focused security environment#J-18808-Ljbffr