Threat Hunter

Digital Hands•Tampa, FL

2d•Onsite

About The Position

At Digital Hands, we deliver cybersecurity services that protect customer environments and drive measurable security outcomes. We’re seeking a Threat Hunter to strengthen our Security Operations Center (SOC) through proactive, intelligence‑driven threat detection. In this role, you’ll focus on hypothesis‑driven threat hunting across customer environments—identifying threats that evade automated detection, validating complex escalations, and translating findings into scalable detection capabilities. You’ll work closely with Threat Intelligence and Detection Engineering to continuously improve our defensive posture. This is a mid‑level individual contributor role with a clear path toward ownership of the threat hunting program.

Requirements

Bachelor’s degree (or equivalent experience) in Cybersecurity, Computer Science, or related field
3+ years of experience in a SOC, detection, or threat hunting role with hands‑on hunting experience
Strong knowledge of MITRE ATT&CK and adversary tradecraft
Experience analyzing threats, exploits, and attacker behavior
Proficiency with query and scripting languages (e.g., KQL, YARA‑L, Python)
Comfort working across endpoint, network, identity, and SIEM data
Strong analytical and investigative skills
Effective communication and collaboration across teams

Nice To Haves

MSSP or multi-tenant experience preferred
Exposure to incident response practices preferred
Relevant certifications (e.g., GCFA, GCTI, GNFA) preferred

Responsibilities

Conduct Threat Hunting: Perform hypothesis-driven hunts across customer environments, prioritized by threat intelligence and detection gaps.
Operationalize Detection Improvements: Translate hunt findings into durable detection content in partnership with detection engineering.
Investigate Advanced Threats: Analyze and validate escalations requiring human judgment and support incident response as needed.
Integrate Threat Intelligence: Execute hunts aligned with intelligence-driven hypotheses and feed insights back into intelligence and detection workflows.
Support Program Maturity: Contribute to threat hunting methodology, cadence, metrics, and continuous improvement initiatives.
Document & Report Findings: Produce clear, repeatable documentation to support internal reporting and customer visibility.