Threat Hunting Researcher (Unit 42)

Overview

Conduct threat hunting research for Unit 42, investigating cyber threats and suspected security incidents while supporting customer responses and timely escalation of high-impact events.

What you'll do

• Perform core threat hunting activities.
• Investigate leads using IOCs, threat intelligence, and internal detections.
• Execute hunting reports and workflows and investigate results.
• Respond to urgent customer hunting requests and suspected security incidents.
• Monitor the threat landscape and contextualize emerging campaigns.
• Escalate major or high-impact security events to leadership.
• Support MDR hunting activities and improve queries, reports, and workflows.

What you'll need

• 3+ years of relevant cybersecurity experience.
• Understanding of threats, attack tools, tactics, techniques, networking, and security fundamentals.
• Experience investigating activity across endpoints, networks, identity, and cloud.
• Ability to work independently and make investigative decisions.
• Experience handling customer-facing security requests and writing investigation summaries.
• Experience writing, modifying, or executing detections, hunting queries, or log-based investigations.
• Strong written and oral English communication skills.

Nice to have

• Incident response experience.
• Proficiency in Python and SQL.
• Familiarity with malware analysis.
• Experience writing technical reports or customer-facing security analysis.

Details

• Remote role in the United States, California.
• Annual salary range: $117,000–$189,200.
• Immigration sponsorship is not available.