• Proactively hunt for hidden threats across endpoints, networks, cloud, and applications. • Proactively create detection rules to alert SOC analysts of intrusions against customer networks. • Assist with tuning and enhancing existing detection rules to better defend against evolving threats. • Develop and execute hypotheses-driven threat hunting campaigns using security data and intelligence. • Analyze large volumes of log, endpoint, and network data to uncover anomalous or malicious activity. • Research and track adversary TTPs and leverage frameworks such as MITRE ATT&CK. • Collaborate with Detection Engineering to refine detection rules, signatures, and playbooks to improve threat detection. • Collaborate with Incident Response and SOC teams to investigate and contain security incidents. • Provide technical mentorship to junior threat hunters and SOC analysts. • Partner with Threat Intelligence to operationalize indicators and adversary insights. • Contribute to continuous improvement of detection engineering and hunting methodologies. • Regularly engage with internal account teams and customers to help strengthen their security posture, identify weaknesses, report on findings, and report on detection strategies. • Provide technical insight to internal account teams and customers as needed.