Threat Hunter

The Threat Hunting Team is the security operations face of Red Canary! We are the customer’s unique ally in helping secure their organization. Our team helps the customer understand the full scope of information available to them and make informed decisions about their environment. As the customer-facing role and voice of Red Canary’s day-to-day security interactions with our customer we play a myriad of roles.

Role

We are looking for an experienced Threat Hunter to join our Threat Hunting team. This is a remote role, reporting to the Manager, Threat Hunting in the Engineering department. We act as a trusted partner and an extension of our customers’ security teams to help them understand and mature their overall security programs. You will proactively hunt for potential cyber threats in customer environments, using findings to both inform customers and improve future detections, while taking ownership of the customer's success by providing the resources they need to remediate and recover.

What you’ll do (Role Expectations)

• Identify, scope, and manage ongoing customer incidents while developing remediation plans to improve security maturity

• Tailor communication to the customer’s level of expertise, providing education to help them make educated, big-picture decisions

• Partner with Detection Engineering, Intelligence, and Research teams to investigate identified or emerging threats relevant to our customers

• Augment automated detection with human-driven hunting to identify anomalous behaviors and drive innovation of Red Canary’s detection capabilities

Who You Are (Success Profile)

• You thrive in ambiguity. You're comfortable building the path as you walk it. You thrive in a dynamic environment, seeing ambiguity not as a hindrance, but as the raw material to build something meaningful.

• You act like an owner. Your passion for the mission fuels your bias for action. You operate with integrity because you genuinely care about the outcome. True ownership involves leveraging dynamic range: the ability to navigate seamlessly between high-level strategy and hands-on execution.

• You are a problem-solver. You love running towards the challenges because you are laser-focused on finding the solution, knowing that solving the hard problems delivers the biggest impact.

• You are a high-trust collaborator. You are ambitious for the team, not just yourself. You embrace our challenge culture by giving and receiving ongoing feedback—knowing that candor delivered with clarity and respect is the truest form of teamwork and the fastest way to earn trust.

• You are a learner. You have a true growth mindset and are obsessed with your own development, actively seeking feedback to become a better partner and a stronger teammate. You love what you do and you do it with purpose.

What We’re Looking for (Minimum Qualifications)

• 3+ years of experience working in the general IT Security industry

• Background in investigating and analyzing alerts and threats for anomalous or malicious activity across Endpoint (EDR), Cloud, or Identity domains

• Natural curiosity with a drive to fully understand the context and impact of threats and potential threats

• Experience working with other teams, stakeholders, or customers to solve complex problems

• Solid written and verbal communication skills with the ability to clearly convey technical findings to others

What Will Make You Stand Out (Preferred Qualifications)

• Experience leveraging Python and Jupyter Notebooks to enhance hunting efficiency

#LI-Remote 

#LI-DB1