🛠 Tech Stack

💼 About This Role

You'll lead proactive, hypothesis-driven hunts across multi-tenant MDR telemetry in Google SecOps, partnering with detection engineering to convert findings into production detections. You'll own the hunt methodology, define tooling and playbooks, and mentor SOC analysts to grow the team's capability. Reporting to the VP, Security, you'll set the technical direction for threat hunting at an automation-first MDR startup.

🎯 What You'll Do

• Lead hypothesis-driven hunts across SIEM, EDR, network, and identity telemetry.
• Own hunt methodology, playbooks, and conversion of findings to detections.
• Partner with detection engineering to turn hunts into production rules.
• Operationalize threat intelligence into hunt hypotheses.
• Mentor SOC analysts and junior hunters on investigations.

📋 Requirements

• 8+ years in threat hunting, SOC, or incident response.
• 3+ years in a senior or lead capacity.
• Hands-on Google SecOps / Chronicle or equivalent cloud-native SIEM.
• Strong command of attacker TTPs and MITRE ATT&CK.
• Scripting fluency in Python and/or PowerShell.

✨ Nice to Have

• Microsoft security stack (Sentinel, Defender) depth.
• SOAR platform experience (Tines, XSOAR, Chronicle SOAR).
• Cloud security depth in AWS, Azure, or GCP.

🎁 Benefits & Perks

• 🏖️ Unlimited PTO
• 🏥 Health Insurance
• 💵 Competitive Salary
• 📈 Equity
• 🏢 Hybrid Work

📨 Hiring Process

Estimated timeline: 2-4 weeks · AI estimate

1. 1Recruiter Phone Screen· 30 min
2. 2Technical Screen with Hiring Manager· 60 min
3. 3Panel Interview· 90 min