AI Threat Hunting Automation Developer

About the role

Responsibilities

• Build environment-specific baseline models for user and entity behavior
• Develop anomaly scoring that distinguishes hunt-worthy deviations from normal variation
• Design natural language query interface for hypothesis-driven threat hunting
• Implement hypothesis templates for MITRE ATT&CK technique coverage
• Build evidence correlation models linking related anomalous events across data sources
• Test systems against real-world attack simulations in our lab environment

Requirements

• 6+ years in ML engineering or security engineering with threat hunting or SIEM experience
• Experience with behavioral analytics, UEBA, or anomaly detection on security telemetry
• Strong Python and SQL skills for large-scale event data analysis
• Understanding of MITRE ATT&CK framework and common attack patterns
• Security certifications such as CISSP, GCIH, or equivalent preferred

Benefits

• Fully remote
• Top-of-market compensation
• Health, dental, and vision
• $5,000 annual training budget including security certifications
• Equity with 4-year vesting

Keep exploring related roles

Use these topic pages to discover more roles in the same hiring cluster.