Threat Hunter

About the role

We are looking for a proactive Threat Hunter to join Mars Security’s early‑stage cybersecurity team. You will work directly with founders and customers, running real hunts across diverse environments and feeding findings back into our platform.

Key responsibilities

• Conduct threat hunts in customer environments using SIEM, EDR, cloud and identity data sources.
• Research adversary infrastructure, tactics, techniques and procedures (TTPs) to stay ahead of emerging threats.
• Design, implement and validate detection rules and hunt queries based on real attacker behavior.
• Develop and maintain detection content across multiple platforms and data sources.
• Analyze large telemetry datasets to uncover anomalies and attack indicators missed by automated systems.
• Contribute insights to improve the platform’s hunting and detection engineering capabilities at scale.

Required profile

• 5+ years of hands‑on threat hunting experience.
• Proven track record of writing detection rules that have stopped real attacks.
• Strong data‑analysis abilities with experience querying high‑volume telemetry.
• Deep understanding of attacker TTPs, adversary tradecraft and end‑to‑end campaign operations.
• Offensive security knowledge and familiarity with networking, identity, cloud and endpoint infrastructures.
• Self‑directed learner who keeps pace with the fast‑moving security landscape.

Required skills

• Python programming for scripting and automation.
• SIEM platforms.
• Endpoint Detection and Response (EDR) tools.
• Cloud security (AWS, Azure, GCP or similar).
• Identity and access management systems.
• Networking fundamentals.
• Data analysis and query languages (e.g., SQL, KQL).
• Detection rule creation and validation.
• Threat intelligence research.