Senior Threat Hunter

🕒 September 4

🇺🇸 United States – Remote

💵 $120k - $150k / year

⏰ Full Time

🟠 Senior

🕵️ Threat Intelligence Specialist

Apply Now
Find Similar Remote Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Logo of SimSpace

SimSpace

201 - 500 employees

Founded 2015

💼 Consulting

🎖️ Defense

🔒 Cybersecurity

🔥 Funding within the last year

💰 $39M Venture Round - SimSpace on 2025-10

Consulting • Defense • Cybersecurity

SimSpace is a cybersecurity company that provides a realistic, intelligent cyber range platform for training, testing, and validating security teams, tools, and AI agents. Its platform enables live-fire exercises, threat emulation (full kill-chain and atomic), validation of controls and agentic workflows, and disaster recovery and compliance testing; it is used by enterprises and government customers to build cyber readiness and resilience. Founded by experts from U. S. Cyber Command and MIT Lincoln Laboratory, SimSpace focuses on upskilling individuals, strengthening teams, and evaluating AI-driven defenses in realistic, production-like simulations.

📋 Description

• Support mentorship and assessment of global security teams across basic to advanced cybersecurity skills • Research and integrate candidate agentic capabilities into test environments • Consult with customers integrating agentic capabilities into cybersecurity enterprises • Identify, integrate, and test AI capabilities before deployment • Review publications and standards covering AI and cybersecurity operations • Mentor global clients and international organizations in advanced threat-hunting tactics and strategy • Establish parsing rules, dashboards, and tuning for enterprise security tools in the cyber range platform • Develop toolsets and scenarios with range operations to model real-world threat-defense scenarios • Build consensus and drive results across competing organizational requirements • Lead projects and mentor team members • Work across a geographically dispersed organization • Support customer security-team assessments and events, with travel estimated up to 25–30%

🎯 Requirements

• Demonstrated proficiency in AI/ML engineering, including practical application and experimentation with AI agents and LLM APIs • Deep understanding of AI agents, including orchestration of agent decision loops, tool access frameworks, and memory systems for threat hunting and proactive security operations • Hands-on experience designing and deploying Retrieval-Augmented Generation (RAG) pipelines • Advanced proficiency in Python and standard data science/AI libraries • Strong scripting skills for data manipulation using Pandas and NumPy • Familiarity with Hugging Face • Familiarity with Ollama and vLLM for running local, privacy-safe LLMs • 6+ years of experience in Security Operations, Incident Response, Detection Engineering, Offensive Security/Red Team, or Cyber Threat Intelligence • Experience analyzing host, network, and application telemetry for indicators of attack across the cyber kill chain • Experience with large datasets and log analysis tools including Splunk, Elastic, Python, Pandas, SQL, Hadoop, and Hue • Ability to apply Cyber Threat Intelligence through enrichment, correlation, and attribution • Experience setting up and troubleshooting security stacks • Familiarity with offensive security strategies and assessment methodology • Experience explaining threat hunt objectives to technical and non-technical audiences and communicating associated risk • Hands-on experience demonstrating threat hunting for indicators of compromise in enterprise-scale EDR and SIEM tools, including Splunk, Elastic, and CrowdStrike • Previous experience performing digital forensics or incident response on major security incidents • Demonstrated self-starter with a desire to help others improve and build the team • Ability to verify identity and eligibility to work in the United States at hire

🏖️ Benefits

• Comprehensive medical, dental, and vision benefits • Savings plans with coverage starting on day one • Company-paid counseling, coaching, and family resources through Spring Health • 401(k) retirement savings plan with company match • Unlimited vacation • Dedicated health and wellness days • Flexible work-life solutions • Paid parental leave • Equity stock options at hire • Annual performance-based equity grants • $1,500–$3,500 employee referral rewards for every qualified hire • Full- and partial-subsidized Peloton membership plans • Peloton equipment discounts • LinkedIn Learning membership • Monthly reimbursements for teammate connections through the SocialSpace Community • Legal plan coverage • Pet insurance • Wellness reimbursements

Apply Now

Similar Jobs

🕒 September 2

Tennr (YC W23)

11 - 50

🏥 Healthcare

☁️ SaaS

🏢 Enterprise

Payor intelligence analyst mapping U.S. insurance entities, policies, and authorization logic. Building data systems for Tennr’s healthcare paperwork automation platform.

🕒 September 1

BlueCross BlueShield of Tennessee

5001 - 10000

🏥 Healthcare

💼 Consulting

🛡️ Insurance

Senior Cyber Threat Hunter protecting BlueCross BlueShield of Tennessee’s systems and data from emerging cyber threats. Identifying vulnerabilities, analyzing network threats, and supporting incident investigations remotely.

🕒 August 14

CrowdStrike

5001 - 10000

🔒 Cybersecurity

☁️ SaaS

🤖 Artificial Intelligence

Threat Hunter analyzing advanced adversaries and creating detections for CrowdStrike’s government cloud cybersecurity platform. Conducting proactive hunts and improving Falcon threat detection capabilities.

🕒 August 4

Allstate

10,000+ employees

💼 Consulting

📦 Logistics

🛡️ Insurance

Exposure Intelligence Analyst securing Allstate’s web applications and APIs. Prioritizing exploitable attack paths and partnering with engineering teams to drive measurable remediation.

🕒 August 4

Allstate

10,000+ employees

💼 Consulting

📦 Logistics

🛡️ Insurance

Exposure Intelligence Analyst securing Allstate’s databases, cloud data stores, and permissions. Identifying exploitable access paths and guiding remediation to reduce enterprise data exposure.