{"id":2771956,"url":"https://alion.io/job/ust-lead-threat-hunter","title":"Lead Threat Hunter","company":{"id":1774626,"name":"UST","domain":"ust.com","url":"https://alion.io/company/ust-com","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"RippleHire","truth_index":{"grade":"B","score":75,"open_postings":141,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":28,"computed_at":"2026-10-22T06:10:10Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Thiruvananthapuram, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":18500,"max_usd":41000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":11},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Crowdstrike","optional":false},{"name":"GCP","optional":false},{"name":"Jupyter Notebook","optional":false},{"name":"Linux","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"Pandas","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"Unix","optional":false},{"name":"Windows","optional":false},{"name":"CI/CD","optional":true}],"status":"live","first_seen_at":"2026-10-06T00:00:00Z","employer_posted_date":"2026-10-17","last_verified_at":"2026-10-22T07:44:40Z","board_verified":true,"closed_at":null,"days_open":16,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":16},"description":"CyberProof is seeking a Lead Threat Hunter with strong expertise in Python, Jupyter Notebooks, and threat hunting automation to proactively identify advanced threats across enterprise environments. This role combines threat hunting, detection engineering, investigation, data analysis, and automation to enhance security monitoring capabilities across endpoint, network, cloud, and SIEM platforms.\nKey ResponsibilitiesConduct proactive, hypothesis-driven threat hunts aligned to MITRE ATT&CK.Investigate security threats across endpoint, network, cloud, and telemetry datasets.Develop and maintain Jupyter Notebook-based hunting frameworks.Build reusable Python modules, APIs, and automation tools for threat hunting and data enrichment.Integrate hunting workflows with SIEM, EDR, threat intelligence, and telemetry sources.Automate hunting processes using orchestration platforms such as Azure ML Pipelines.Analyze cloud environments including AWS, Azure, and GCP for indicators of compromise.Collaborate with Threat Intelligence, Detection Engineering, and SOC teams to identify detection gaps.Produce weekly, monthly, and executive-level threat hunting reports and findings.Required SkillsThreat Hunting & SecurityThreat Hunting and Incident ResponseDetection EngineeringDigital Forensics and InvestigationsMITRE ATT&CK FrameworkThreat Intelligence and TTP AnalysisSecurity Monitoring and Log AnalysisTechnical SkillsPython DevelopmentJupyter NotebooksPandas, MsticPyAPI Development and AutomationData Pipelines and Data EnrichmentNetwork Traffic and Packet AnalysisSecurity PlatformsSIEM PlatformsEDR/XDR TechnologiesMicrosoft Sentinel\nMicrosoft Defender\nCrowdStrike\nCybereason (preferred)\nCloud Security\nAzure Security\nAWS Security\nGCP Security\nCloud Threat Hunting\nOperating Systems\nWindows Security\nLinux/Unix Security\nPreferred Qualifications\nGIAC GCIH\nGCFA\nGREM\nOSCP\nCEH\nExperience with CI/CD and modern software development practices\nExperience building automation frameworks for detection validation and telemetry analysis","description_format":"text","description_chars":2033,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["IT Consulting & Digital Transformation","IT Outsourcing & Dedicated Teams"],"lifecycle":[{"event":"open","at":"2026-10-17T06:35:48Z"}],"visa":[],"liveness":{"score":51,"band":"ok","label":"Likely open","p_open":1,"p_active":0.57,"p_room":0.9,"age_days":16,"expected_fill_days":28,"reasons":["conf:1","stale_co","velocity","win:mid","comp:brand"],"computed_at":"2026-10-22T06:10:10Z"},"pay":null,"html_url":"https://alion.io/job/ust-lead-threat-hunter","json_url":"https://alion.io/job/ust-lead-threat-hunter.json","meta":{"generated_at":"2026-10-22T08:59:17Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":5430,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-23T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1774626},"rest":"https://alion.io/mcp/rest/get_company?id=1774626"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fust-lead-threat-hunter"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fust-lead-threat-hunter"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fust-lead-threat-hunter"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ust-lead-threat-hunter\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fust-lead-threat-hunter"}]}