Cyber Threat Hunter

Job not on LinkedIn

🔥 0 minutes ago

🇺🇸 United States – Remote

💵 $116k - $125k / year

⏰ Full Time

🟢 Junior

🕵️ Threat Intelligence Specialist

🚫👨‍🎓 No degree required

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

The College Board

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 1900

📚 Education

🤝 Non-profit

Education • Non-profit

The College Board is a mission-driven, not-for-profit organization dedicated to promoting excellence and equity in education. It connects students to college success and opportunity by supporting them in building essential skills for higher education and removing barriers to access. The College Board operates with a focus on respect, diversity, inclusion, and collaboration, with a diverse and dedicated team of professionals. Based in several locations across the United States, they strive to modernize operations and increase their digital footprint, supporting students and families nationwide.

📋 Description

• Execute hypothesis-driven threat hunts across AWS, identity, endpoint, and network telemetry • Document hunt findings and recommended control or detection improvements • Build, tune, and maintain detections for IAM misuse, persistence, privilege escalation, and data access or exfiltration • Reduce alert noise through tuning, baselining, and enrichment • Map detections and hunts to MITRE ATT&CK techniques • Support security incident investigation and containment through triage, log analysis, impact scoping, and documentation • Develop and refine incident response playbooks • Produce after-action reports covering root cause, control gaps, and remediation steps • Participate in tabletop, fire drill, and purple team exercises • Partner with offensive testing, engineering, architecture, product security, GRC, and product teams • Improve logging, telemetry coverage, detections, and hardened configurations • Develop lightweight automation and scripts for investigation, enrichment, and reporting • Use LLMs and AI tools to accelerate enrichment, automation, and tool development while validating outputs • Maintain detection logic, hunt results, and response procedures • Share threat insights and lessons learned through briefings or written updates

🎯 Requirements

• 1 to 3 years of experience in cyber defense, such as threat hunting, detection engineering, SOC analysis, or incident response, in enterprise environments • Recent graduates with a year or more of relevant hands-on experience are encouraged to apply • Clear understanding of proactive, hypothesis-driven threat hunting and its distinction from incident response • Strong foundations in endpoint and operating system behavior, including process trees and anomalous activity • Foundational to moderate AWS cloud security experience, including CloudTrail, IAM, S3, VPC Flow Logs, CloudWatch logs, and GuardDuty • Hands-on experience writing queries and working with EDR, SIEM, and authentication logs • Experience tuning detections to improve signal-to-noise • Experience supporting incident response, including triage, log analysis, scoping, and documentation • Strong written and verbal communication skills • Experience partnering across engineering, architecture, and development teams • Authorization to work in the United States • Curiosity and willingness to adopt emerging AI-driven solutions and digital tools • Learner's mindset and commitment to growth • Collaborative and empathetic approach • Nice to have: relevant certifications such as GCIA, GCIH, GNFA, AWS Security Specialty, or Security+ • Nice to have: familiarity with containers, Kubernetes, serverless, CI/CD pipelines, and identity-based cloud attacks • Nice to have: Python, PowerShell, or Bash scripting skills • Nice to have: familiarity with LLMs and AI security tooling • Nice to have: purple team, MITRE ATT&CK, investigative, forensic, MDR, SOC, or GRC experience

🏖️ Benefits

• Fully remote work option • Hybrid option for candidates living near College Board offices (Tuesday and Wednesday in office) • Comprehensive compensation and benefits package • Compensation adjusted by location • Transparent conversations about compensation and benefits • Meaningful career and supportive team • Self-sustaining nonprofit work environment