The University of Maryland Global Campus (UMGC), founded in 1947, is a pioneering institution dedicated to serving adult learners and military personnel worldwi
Cybersecurity Threat Hunter
Location
Maryland
Posted
20 hours ago
Salary
$120K - $135K / year
Seniority
Senior
Job Description
Cybersecurity Threat Hunter
University of Maryland Global Campus
Title: Cybersecurity Threat Hunter Location: Adelphi United States Category: IT and Project Management Type: Full time Job Description: - Security Operations Full-time, Exempt Regular, Pay Grade 3.4 Location: Hybrid (Occasional onsite presence in Adelphi, MD) We are seeking a highly skilled and proactive Cybersecurity Threat Hunter to join our Information Security team. In this role, you will be responsible for proactively identifying advanced threats and developing detection strategies to protect enterprise assets. You will apply your deep expertise in adversary tactics, techniques, and procedures (TTPs), threat intelligence, and endpoint/network telemetry to hunt, investigate, and mitigate complex threats in our hybrid multi-cloud environment. Duties and Responsibilities: - Lead proactive threat hunting activities across endpoints, network, and cloud environments to detect anomalous behaviors and emerging threats. - Analyze large security logs to identify patterns of malicious activity and Indicators of Compromise (IOCs) using our SIEM and EDR platforms, augmenting analysis with threat intelligence feeds. - Develop and refine hypotheses for hunting campaigns based on current threat landscape and adversary TTPs (e.g., MITRE ATT&CK). - Collaborate with the bigger Information Security team and other cross-functional teams to triage, escalate, and respond to identified threats. - Design and implement custom detection logic and rules to improve threat detection efficacy within SIEM tool. - Perform analysis on phishing emails, malicious files, and other threat artifacts when required. - Develop documentation, hunting playbooks, and knowledge transfer materials for junior analysts and other stakeholders. - Produce relevant valuable reports following threat assessments highlighting recommendations to improve security. - Provide expert-level consultation on threat hunting methodologies and cyber adversary techniques. - Maintain awareness of the latest security threats, vulnerabilities, and attack techniques through continuous research. - Mentor and guide tier 1 engineers, fostering skill development and knowledge sharing. Hiring Range: $120,000.00 - $135,000.00 All submissions should include a cover letter and resume. The University of Maryland Global Campus (UMGC) is an equal opportunity employer and complies with all applicable federal and state laws regarding nondiscrimination. UMGC is committed to a policy of equal opportunity for all persons and does not discriminate on the basis of race, color, national origin, age, marital status, sex, sexual orientation, gender identity, gender expression, disability, religion, ancestry, political affiliation or veteran status in employment, educational programs and activities, and admissions. Workplace Accommodations: The University of Maryland Global Campus Global Campus (UMGC) is committed to creating and maintaining a welcoming and inclusive working environment for people of all abilities. UMGC is dedicated to the principle that no qualified individual with a disability shall, based on disability, be excluded from participation in or be denied the benefits of the services, programs, or activities of the University, or be subjected to discrimination. For information about UMGC's Reasonable Workplace Accommodation Policy or to request an accommodation, applicants/candidates can contact Employee Accommodations via email at employee-accommodations@umgc.edu. Benefits Package Highlights: Generous Time Off: Enjoy 22 days of paid vacation, 15 days of sick leave, 3 personal days, and 16 paid holidays (17 during general election years). For part-time employees, time off rates will be prorated based on the number of hours worked. Comprehensive Health Coverage: Access to health care, medical with vision, dental, and prescription plans for both individuals and families, effective from the 1st of the month following your hire date. Insurance Options: Term Life Insurance, Accidental Death and Dismemberment Insurance, and Long-Term Disability (LTD) Insurance. Part-time employees working less than 0.5 FTE are not eligible for LTD. Flexible Spending Accounts: Available for medical and dependent care expenses. Retirement Plans: Choose between the Optional Retirement Program (ORP) or the Maryland State Retirement and Pension System (MSRPS). Supplemental Retirement Plans: include 401(k), 403(b), 457(b), and various Roth options. The university does not provide matching funds. Tuition Remission: Immediate availability for Regular Exempt Staff. Spouses and dependent children are eligible for undergraduate tuition remission after two years of service. NOTE: For part-time employees (at least 50 percent of the time), tuition remission benefits are prorated. Preferred Qualifications: Certifications: GIAC Cyber Threat Intelligence (GCTI) GIAC Certified Incident Handler (GCIH) GIAC Advanced Threat Hunting (GATH) Certified Threat Intelligence Analyst (CTIA) OSCP or similar offensive security certifications Experience: Minimum of 6-8 years of relevant cybersecurity experience, with at least 5 years focused on threat hunting, threat intelligence, or incident response. Required Qualifications: Education: Bachelor's degree in Cybersecurity, Computer Science, Information Systems, or a related field (or equivalent experience). - Excellent verbal and written communication skills; capable of conveying technical findings to technical and non-technical audiences. Skills and Competencies: Strong knowledge of threat actor tactics, techniques, and procedures (TTPs) and experience using frameworks such as MITRE ATT&CK. Proficiency with EDR tools, SIEM platforms, and threat intelligence platforms. Ability to develop detection logic using scripting or query languages (e.g., PowerShell, Bash, Python). Experience with log and packet analysis, endpoint forensics, and malware reverse engineering. In-depth understanding of operating system internals (Windows, Linux), network protocols, and cloud infrastructure (AWS, Azure). Strong analytical and problem-solving skills, with the ability to work independently and collaboratively.
Related Guides
Related Categories
Related Job Pages
More Threat Intelligence Specialist Jobs
Access Improvement Specialist
University of CaliforniaSince 1869, the University of California has been providing excellent college educational programs for students seeking bachelor's to doctoral degrees. The Univ
Title: Access Improvement Specialist- Patient Access Organization Location: Los Angeles United States Work Location: Los Angeles, CA, USA Onsite or Remote Fixed Hybrid Work Schedule Varies- Monday thru Friday 7am-7pm Salary Range: $45.69 - 99.76 Hourly Employment Type 2 - Staff: Career Duration Indefinite Job # 30001 Job Description: Access Improvement Specialist- Patient Access Organization - - 30087 - UCLA Health Skip to content UCLA Health Home Page Main menu. Press enter or space keys to expands and escape key to collapse - Search jobs - Employee Resources - Employee Referral Program - For Employees - Employee Onboarding - Log In Access Improvement Specialist- Patient Access Organization General Information Press space or enter keys to toggle section visibility Work Location: Los Angeles, CA, USA Onsite or Remote Fixed Hybrid Work Schedule Varies- Monday thru Friday 7am-7pm Posted Date 05/04/2026 Salary Range: $45.69 - 99.76 Hourly Employment Type 2 - Staff: Career Duration Indefinite Job # 30001 Primary Duties and Responsibilities Press space or enter keys to toggle section visibility UCLA Health runs and operates over 270 outpatient clinics located in Southern California with over 3,000,000 outpatient encounters annually. Working under the direction of the Patient Access Organization's Scheduling Pathways and Technology Director, the Access Improvement Specialist will play a crucial role in identifying, prioritizing, and implementing scheduling workflow enhancements within the PAO's Patient Communication Center (core call center functions) as well as supporting enterprise projects. This role focuses on optimizing operational efficiency and patient access while ensuring high-quality service delivery. The individual will collaborate with various areas of the Patient Access Organization to analyze performance data, identify improvement opportunities, and implement effective solutions, and help guide the work and review of the Scheduling Workflow Optimization Analysts. Additionally, this individual will be responsible for spearheading department initiatives aimed at enhancing organizational efficiency, effectiveness, and overall performance. This role requires a strategic thinker with a strong background in process improvement, data analysis and project management. The Access Improvement Specialist will work closely with the Patient Access Organization leaders to lead process improvement efforts designed to enhance the overall system and functions of the Patient Access Organization to increase access for our patients. $45.69- $99.76 Job Qualifications Press space or enter keys to toggle section visibility - Bachelor's Degree in Business Administration, Healthcare Management, Operations Management, or related field required - Certification in Lean, Lean Six Sigma, any other certified process improvement methodology. required - Minimum of 3 years of experience in a healthcare call center environment, with a strong understanding of healthcare scheduling workflows preferred - Proven experience in performance improvement, workflow optimization, and project management - Strong analytical skills with the ability to interpret complex data sets and identify actionable insights. - Proactive and creative thinker with the ability to develop innovative solutions. - Excellent communication and interpersonal skills, with the ability to collaborate effectively with diverse teams. - Ability to work independently with minimal supervision. - Proficiency in performance management software and tools (e.g. Excel, Tableau, Power BI) - Proficiency in using workflow mapping tools, such as Visio - Experience working in clinic and call center operations - Business applications management (e.g., Epic, Salesforce) - Familiarity with scheduling software and call center technologies - Demonstrated ability to build consensus among a diverse group of stakeholders - Experience and comfort in delivering presentations to senior leadership - Proven understanding and articulation of clinic operational key performance indicators - Champions a compelling vision and works collaborative across diverse teams through transitions to new achievements - Ability to build strong relationships with administrators, IT professionals, clinical providers, and care teams - Excellent communication and interpersonal skills, with the ability to collaborate effectively with cross-functional teams - Capable of communicating through formal presentations, reporting to senior leadership both within and outside of the organization - Capable of acting in the capacity of a public liaison for the central access and the organization, helping to build and maintain relationships in the community and represent the organization's brand - Ability to perform role with minimal supervision, notice, or direction to identify and resolve problems and meet performance goals - Ability to adapt to changing priorities and work effectively in a fast-paced environment As a condition of employment, the final candidate who accepts an offer of employment will be required to disclose if they have been subject to any final administrative or judicial decisions within the last seven years determining that they committed any misconduct; or have filed an appeal of a finding of substantiated misconduct with a previous employer. Current/former UC employees are subject to a personnel file review. Apply Now Apply as Internal/Current Employee Refer a Friend - Back to Search Results UCLA Health Accessibility | Privacy policy
• Analyze alerts, investigate incidents, and lead response activities across enterprise systems • Act as Incident Commander and escalation point for high-severity incidents and post-incident reviews • Perform threat hunting, retro hunting, and deep-dive analysis to identify advanced attack techniques • Continuously improve detection and response workflows, playbooks, and automation • Serve as the SME for AI detection and response, including threats such as prompt injection, model abuse, and data leakage • Partner with business units to understand AI usage and provide guidance on secure implementation and monitoring • Identify and onboard new telemetry sources for AI platforms and agentic workflows • Translate emerging AI threats and industry trends into actionable detections and controls • Provide hands-on mentorship and guidance to analysts during investigations and response efforts • Set the technical standard for alert review, triage, detection quality, and investigation depth • Lead by example in incident handling, documentation, and decision-making under pressure • Support hiring, onboarding, and ongoing development of team members • Design and maintain detection logic, playbooks, and workflows aligned to threat coverage and business risk • Ensure detection capabilities support key objectives such as visibility, automation, and data quality • Identify gaps in tooling, telemetry, and processes; recommend and drive long-term improvements • Align detection and response strategies with frameworks such as MITRE ATT&CK and emerging AI threat models • Partner with product owners, engineering teams, and vendors to translate business priorities into security solutions • Organize and drive cross-functional initiatives to enhance detection and response capabilities and improve overall security maturity • Support root cause analysis and remediation efforts across technical and business domains • Communicate risk, threats, and security recommendations effectively to technical and non-technical stakeholders • Contribute to strategic initiatives and influence security decisions across the organization • Contribute to detection, analysis, and response for threats targeting CI/CD pipelines and software supply chains • Improve visibility, telemetry, and detection coverage across the software development lifecycle • Identify attack patterns and strengthen controls related to build systems, dependencies, and deployment workflows • Stay current on attacker TTPs, tools, and frameworks, including AI, cloud, and supply chain threats • Share insights through documentation, training sessions, and team knowledge transfer • Foster a culture of experimentation, continuous improvement, and technical excellence
Industry Value Creation Specialist
Genuine Parts CompanyEsta descripción de trabajo ilustra la naturaleza general y el nivel de trabajo realizado por los empleados dentro de esta clasificación de trabajo. No pretende contener ni ser interpretado como un inventario completo de todos los deberes, responsabilidades y habilidades requeridas. La gerencia se reserva el derecho de agregar o modificar deberes en cualquier momento.
Role Description The Cost Savings Specialist plays a critical role in driving customer value by: - Training account managers on best practices for identifying and executing savings. - Creating, validating, and replicating cost savings initiatives across our [Industry Group] Corporate Accounts portfolio. - Collaborating with suppliers to identify needs and engineer industry-specific solutions. - Developing high-impact savings opportunities in partnership with local account managers and suppliers. - Ensuring measurable, documented value consistently flows into the company’s cost savings portal. By strengthening the pipeline of cost savings projects, the Specialist enables Corporate Account Managers (CAMs) and Corporate Account Experience Managers (CAEMs) to deliver compelling value stories to agreement stakeholders — shifting the customer conversation from price to total business impact. Qualifications - Bachelor’s degree; equivalent industry experience. - 5+ years of experience in industrial distribution, supply chain, operations, or related field. - Proven track record of identifying and implementing cost reduction initiatives with measurable results. - Strong analytical and problem-solving abilities. - Excellent communication skills, with the ability to coach internal teams and collaborate with suppliers. - Project management experience, with the ability to lead multiple initiatives simultaneously. - Proficiency in Excel, reporting systems, and data analysis; experience with cost savings portals is a plus. - Willingness to travel. Requirements - Results Oriented: Focused on measurable outcomes that impact both customer and company profitability. - Collaboration: Works effectively with account managers, suppliers, and support staff to drive shared success. - Innovation: Identifies new and creative approaches to delivering savings. - Customer-Centric Mindset: Aligns initiatives to customer goals, reinforcing strategic partnerships. - Scalability: Capable of turning one-off successes into repeatable, industry-wide solutions. Performance Metrics - Annual gross profit dollars generated through cost savings efforts. - Number of validated and documented projects entered in the portal. - Replication rate of successful initiatives across multiple accounts. - Adoption of best practices among account managers. - Customer satisfaction/retention tied to cost savings delivery.
Competitive Intelligence Analyst
VaronisVaronis, established in 2005, is a software company headquartered in New York, New York, specializing in data security and analytics. Its mission is to safeguar
Role Description Varonis is looking for a highly technical, deeply curious Competitive Intelligence Analyst to lead our CI program. Your job is simple to state and hard to do: help Varonis win. You'll research competitors, pressure-test their claims, devise winning plays, and build the tools and automation that let our field self-serve competitive insight at scale. What You'll Own - Deal Support - Provide tailored, proactive support on competitive deals, addressing competitor-specific challenges before they stall an opportunity. - Develop a deep rapport with the field so you're the first call when a competitor shows up in a deal. - Content Creation - Build the tools that win deals: battlecards, playbooks, kill sheets, customer-facing comparisons, and technical positioning, all written to be used, not filed away. - Produce sharp materials with clear points, backed by specific, real examples, not a wall of content or vague positioning. - Competitive Analysis - Run quarterly win/loss analysis with product marketing to understand why we win, why we lose, and how to improve competitive conversion rates. - Connect the dots across functions, feeding deal insight to sales, roadmap input and product gaps to product, and positioning and messaging to marketing. - Competitive News & Questions - Maintain an ongoing pulse on the market, monitoring competitor product updates, announcements, and strategy shifts. - Share timely, sourced analysis with the stakeholders who need it, and build compelling narratives, including win-wires, that the field remembers and repeats. - AI-First Operating Model & CompetiBot Upkeep - Own and continuously improve CompetiBot, our competitive intelligence agent, and the automation behind it, so the field can self-serve accurate, sourced competitive answers at scale. - Design, prompt, and tune agent-based workflows that monitor the market, synthesize intelligence, and surface field-ready guidance, freeing you for higher-order analysis. Qualifications - 5+ years in the cybersecurity market, with a strong focus on data, identity, and cloud security. - 3+ years of relevant experience in one or more of: sales engineering/pre-sales, field-facing competitive intelligence, solutions or technical marketing, product marketing, or product management. - A strong technical foundation and the ability to break down complex systems into actionable insight. - Hands-on comfort with AI agents and automation, or genuine eagerness to learn fast. - Proven ability to simplify complex technical ideas into practical, succinct guidance and executive summaries. - Excellent written, verbal, and visual communication skills, with impeccable attention to detail and experience presenting to executives. - Insatiable curiosity about the cybersecurity market. Requirements - You're technical to the core. - You speak the language of the field, not marketing speak. - You're genuinely excited about AI, not intimidated by it. - You're a skeptic by instinct. - You're a builder with a bias for action. Benefits - One of the most technically respected companies in data security. - A role where your job is to help the company win, with visibility across sales, product, and marketing. - A company investing seriously in AI across the go-to-market function. - Competitive compensation, equity, and a culture that values ownership and impact. Company Description This position is remote with occasional travel to Varonis HQ in New York City and to corporate tradeshows. Regular remote collaboration with colleagues in Israel is required. Varonis is an equal-opportunity employer. We evaluate qualified applicants without regard to race, color, religion, sex, national origin, disability, veteran status, and other legally protected characteristics.

