Director of Threat Hunting | Remote US
United States
Coalfire
Coalfire is a cybersecurity and compliance services company that works with enterprises and tech businesses in FedRAMP, cloud migration, AI Risk, pen…Coalfire is on a mission to make the world a safer place by solving our clients’ hardest cybersecurity challenges. We work at the cutting edge of technology to advise, assess, automate, and ultimately help companies navigate the ever-changing cybersecurity landscape. We are headquartered in Denver, Colorado with offices across the U.S. and U.K., and we support clients around the world.
But that’s not who we are – that’s just what we do. We are thought leaders, consultants, and cybersecurity experts, but above all else, we are a team of passionate problem-solvers who are hungry to learn, grow, and make a difference.
Position Summary
The Director of Threat Hunting is responsible for designing, implementing, and managing the organization's customer facing proactive threat hunting program. This program will serve multiple clients across varied industry verticals and threat profiles. This individual will oversee a team of threat hunters to detect and mitigate advanced security threats before they impact the business operations of our customers. The role involves strategic planning, developing hunting methodologies, refining processes, and ensuring alignment with diverse organizational security objectives.
What You'll Do
- Lead and develop a high-performing threat hunting team, providing strategic direction and technical guidance.
- Establish and refine the organization's threat hunting framework based on existing frameworks like the Open Threat Hunting Framework (OTHF) and industry best practices.
- Define and drive threat hunting methodologies, ensuring structured, hypothesis-driven approaches to proactive threat detection.
- Develop and oversee key performance indicators (KPIs) and metrics for measuring the effectiveness of threat hunting operations.
- Collaborate with Cyber Threat Intelligence (CTI) teams to integrate intelligence-driven hunting approaches.
- Oversee the identification, validation, and prioritization of hunts based on adversary tactics, techniques, and procedures (TTPs).
- Ensure continuous improvement of threat detection capabilities through automation, data analytics, and security tooling enhancements.
- Foster collaboration between security operations, incident response, and red/blue teams to improve detection and response capabilities.
- Conduct executive-level reporting and communicate threat landscape insights to senior leadership and stakeholders.
- Develop and execute a training and mentorship program to upskill threat hunters within the organization.
- Ability to travel 20%
What You'll Bring
- Minimum 8+ years of experience in cybersecurity, with at least 3+ years in a leadership role.
- Proven experience leading threat hunting, threat intelligence, or security operations teams.
- Expertise in host and network forensic analysis across multiple platforms (Windows, Linux, Cloud environments).
- Extensive knowledge of MITRE ATT&CK, OWASP, NIST, ISO/IEC 27001, and cyber threat intelligence frameworks.
- Experience with SIEM, EDR, threat intelligence platforms, and network analysis tools.
- Demonstrated experience in developing and refining threat hunting processes.
- Familiarity with data science and analytics techniques used to enhance security operations.
- Strong leadership and people management skills with experience leading security teams.
- Deep understanding of threat hunting methodologies, intelligence-driven hunting, and adversary TTPs.
- Excellent communication and presentation skills, with the ability to convey complex security concepts to both technical and non-technical audiences.
- Strong ability to align threat hunting objectives with broader organizational security strategy.
- Highly analytical mindset with problem-solving skills to drive continuous improvement.
- Ability to foster a proactive, investigative mindset among team members.
Bonus Points
- Industry-recognized certifications such as CISSP, OSCP, GCTH, GIAC (GCIH, GCFA, GNFA), or equivalent experience.
At Coalfire, you’ll find the support you need to thrive personally and professionally. In many cases, we provide a flexible work model that empowers you to choose when and where you’ll work most effectively – whether you’re at home or an office.
Regardless of location, you’ll experience a company that prioritizes connection and wellbeing and be part of a team where people care about each other and our communities. You’ll have opportunities to join employee resource groups, participate in in-person and virtual events, and more. And you’ll enjoy competitive perks and benefits to support you and your family, like paid parental leave, flexible time off, certification and training reimbursement, digital mental health and wellbeing support membership, and comprehensive insurance options.
At Coalfire, equal opportunity and pay equity is integral to the way we do business. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran. Coalfire is committed to providing access, equal opportunity, and reasonable accommodation for individuals with disabilities in employment, its services, programs, and activities. To request reasonable accommodation to participate in the job application or interview process, our Human Resources team at HumanResourcesMB@coalfire.com.
* Salary range is an estimate based on our InfoSec / Cybersecurity Salary Index 💰
Tags: Analytics Automation CISSP Cloud Data Analytics EDR GCFA GCIH GIAC GNFA Incident response KPIs Linux MITRE ATT&CK NIST OSCP OWASP Security strategy SIEM Strategy Threat detection Threat intelligence Travel TTPs Windows
Perks/benefits: Career development Competitive pay Flex vacation Health care Insurance Parental leave Salary bonus Team events
More jobs like this
Explore more career opportunities
Find even more open roles below ordered by popularity of job title or skills/products/technologies used.