Threat Hunter

Summary

Arctiq is a global technology services company delivering managed and professional services across cybersecurity, cloud infrastructure, networking, data and AI, and enterprise service management. The Threat Hunter will proactively identify and investigate cyber threats across client environments, develop and tune detection content, support incident response, and advise clients on improving their security posture.

Responsibilities

• Perform proactive threat hunting across multi-tenant client environments using SIEM, EDR, NDR, and other telemetry sources
• Drive proactive threat hunting by modeling attacker behavior and testing hypotheses against client data using threat intel and contextual baselines
• Analyze indicators of compromise (IOCs) and behavior patterns to uncover stealthy threats
• Investigate anomalies surfaced through tools or analyst escalations and provide deep-dive analysis
• Create and tune detection content (SIEM rules, correlation logic, signatures) to improve threat visibility
• Document hunt processes, findings, and incident recommendations for internal stakeholders and clients
• Assist in incident response efforts including containment, eradication, and recovery
• Recommend security control improvements based on observed threats and hunting outcomes
• Partner across internal security teams to enhance detection strategies and drive continuous improvement of the MSSP threat detection framework
• Engage with clients during onboarding, security reviews, or post-incident briefings
• Maintain and enhance security solutions such as firewalls, IDS/IPS, DLP, vulnerability scanners, PAM, and endpoint protection tools for clients
• Monitor the evolving threat landscape and incorporate the latest intelligence into proactive threat hunting efforts

Skills

• Bachelor's degree/Diploma in Computer Science, Cybersecurity, Information Systems, or a related field or equivalent practical experience
• 3+ years of hands-on experience in threat hunting, incident response, SOC analysis, or threat intelligence
• Solid understanding of Windows and Linux operating systems and authentication protocols
• Familiarity with cloud security platforms (AWS, Azure, GCP)
• Strong grasp of security frameworks (MITRE ATT&CK, NIST, etc.)
• Proficiency with EDR and SIEM tools (e.g., CrowdStrike, SentinelOne, Splunk, QRadar)
• Knowledge of networking fundamentals (protocols, firewalls, routing, etc.)
• Experience with malware analysis, packet capture analysis, and host/network forensics
• Skilled in scripting or automation (Python, PowerShell, etc.) for hunt support and data enrichment
• Customer-focused mindset with the ability to communicate effectively and confidently with technical and non-technical stakeholders
• Strong analytical, troubleshooting, and problem-solving skills
• High attention to detail, discretion, and integrity in handling sensitive client data
• Ability to manage multiple incidents and prioritize tasks under pressure
• Self-starter with a passion for continuous learning and cybersecurity excellence
• Hands-on incident response or SOC experience in a service provider environment
• Relevant certifications such as GCIH, GCFA, GCIA, Security+, CEH, or CISSP

Qualifications

Must Haves

• Bachelor's degree/Diploma in Computer Science, Cybersecurity, Information Systems, or a related field or equivalent practical experience
• 3+ years of hands-on experience in threat hunting, incident response, SOC analysis, or threat intelligence
• Solid understanding of Windows and Linux operating systems and authentication protocols
• Familiarity with cloud security platforms (AWS, Azure, GCP)
• Strong grasp of security frameworks (MITRE ATT&CK, NIST, etc.)
• Proficiency with EDR and SIEM tools (e.g., CrowdStrike, SentinelOne, Splunk, QRadar)
• Knowledge of networking fundamentals (protocols, firewalls, routing, etc.)
• Experience with malware analysis, packet capture analysis, and host/network forensics
• Skilled in scripting or automation (Python, PowerShell, etc.) for hunt support and data enrichment
• Customer-focused mindset with the ability to communicate effectively and confidently with technical and non-technical stakeholders
• Strong analytical, troubleshooting, and problem-solving skills
• High attention to detail, discretion, and integrity in handling sensitive client data
• Ability to manage multiple incidents and prioritize tasks under pressure
• Self-starter with a passion for continuous learning and cybersecurity excellence
• Hands-on incident response or SOC experience in a service provider environment
• Relevant certifications such as GCIH, GCFA, GCIA, Security+, CEH, or CISSP

Benefits

• Performance-based incentives
• Outstanding health, dental, and vision insurance plans
• Retirement savings plan with employer matching
• Flexible work schedule and remote work options
• Professional development and training opportunities
• Collaborative and inclusive work culture with opportunities for career growth