• Design and execute structured evaluation frameworks to assess the quality, coverage, and fraud-signal value of incoming data assets from vendor partners • Build lift analyses, backtests, and champion/challenger comparisons to quantify the incremental value of new data signals against our existing fraud detection stack • Profile vendor datasets for completeness, freshness, match rates, and population coverage across verticals (crypto, fintech, neobanks, e-commerce, etc.) • Collaborate with fraud leadership to define evaluation criteria tied to real fraud outcomes — false positive rates, catch rates, precision/recall tradeoffs • Translate vendor data findings into clear, actionable recommendations: adopt, pilot, deprioritize, or decline • Partner with data engineering to define ingestion requirements and ensure test environments reflect production-like conditions • Document evaluation results and maintain an internal knowledge base on vendor data performance over time • Support ad hoc deep dives into fraud trends, model performance, and client-specific data questions as needed

• Assist senior hunters in running searches across endpoints and networks to uncover hidden threats, unusual behavior, and stealthy malware. • Review and analyze security logs and telemetry to identify anomalies or potential indicators of compromise (IOCs). • Help create, test, and write new threat detection rules to improve the company's security visibility. • Keep up to date on major global cyber threats and assist in mapping attacker Tactics, Techniques, and Procedures (TTPs). • Help review search findings, separate benign events from actual threats, and draft technical reports for senior analysts.

Role Description We're looking for a Senior Principal Threat Hunter to serve as a senior technical leader within our Cyber Defense Team. This is a high impact individual contributor role; you won't manage people, but you'll influence how we hunt, investigate, and respond to threats across cloud and SaaS environments at scale. You'll be the person who takes a weak signal, a piece of emerging intelligence, or an unusual customer activity pattern and turns it into a meaningful investigation, a proactive hunt, or a new detection opportunity. You'll lead the most complex investigations, drive threat intelligence initiatives, and help define the hunting methodologies that guide our customers' security outcomes. As one of the team's most senior practitioners, you'll act as a force multiplier across hunting, intelligence, and incident response functions, elevating technical standards, mentoring peers, and helping shape the future of our detection and response capabilities. What You'll Do - Design and execute proactive threat hunts across cloud and SaaS environments (AWS, Azure, GCP, Okta, M365), grounded in current intelligence and ATT&CK-mapped adversary behavior. - Mature and operate a recurring threat intelligence reporting function, turning intel into hunt leads, detection opportunities, and customer-facing narratives. - Lead incident response investigations during US business hours, from scoping through root cause; step into the Incident Commander role when required. - Continuously monitor threat detections and deliver responsive services with thorough event analysis and judgement. - Triage and investigate security alerts across cloud and SaaS environments, separating true threats from noise and surfacing detection gaps to the detection engineering team. - Leverage automation and AI tooling to scale impact, and propose improvements for processes, workflows, products, and policies. - PLUS: Exposure to detection engineering, tooling and automation development, or prior managed services (MSSP) experience. Qualifications - 5+ years of experience in a security operations role, with a focus on threat hunting and/or threat intelligence. - Proven experience building or contributing to a structured threat hunt and/or threat intelligence program. - Incident response experience with the ability to lead investigations independently; Incident Commander experience a plus. - Working knowledge of cloud and SaaS environments (AWS, Azure, GCP, Okta, M365). - Hands-on use of automation or AI tooling in security operations; demonstrated use, not just awareness. - Strong written and verbal communication, excellent analytical and problem-solving skills, highly independent and self-driven, and comfortable in a fast-paced and virtual environment. Requirements - 5+ years of experience in a security operations role, with a focus on threat hunting and/or threat intelligence. - Proven experience building or contributing to a structured threat hunt and/or threat intelligence program. - Incident response experience with the ability to lead investigations independently; Incident Commander experience a plus. - Working knowledge of cloud and SaaS environments (AWS, Azure, GCP, Okta, M365). - Hands-on use of automation or AI tooling in security operations; demonstrated use, not just awareness. - Strong written and verbal communication, excellent analytical and problem-solving skills, highly independent and self-driven, and comfortable in a fast-paced and virtual environment. Benefits - Location: US Remote - Competitive benefits package including equity, health insurance (medical, dental, vision) that is fully covered for the employee. - 401K plan with match. - Unlimited PTO and more.

• Leverage AI tools and methodologies to boost productivity, monitoring, synthesis, and impact • Contribute to building AI capabilities into internal competitive intelligence workflows • Identify, collect, and evaluate relevant competitor information, including product capabilities, new features, positioning, business activity, and market signals • Maintain and optimize internal competitor knowledge bases, including competitor pages, capabilities matrices, and market insights repositories • Deliver regular competitive intelligence reports and syntheses for Product, Sales, Marketing, and leadership teams • Provide strategic recommendations based on competitive and market insights • Support Sales, Solutions Engineering, Product, and Marketing teams with deeper analyses tailored to their needs and audiences • Proactively present insights to key stakeholders and help anticipate market shifts that may impact Filigran’s strategy