• Conduct comprehensive analysis across OSINT and Deep & Dark Web (DDW) sources. • Conduct proactive, covert engagement with threat actors across diverse underground environments. • Proactively monitor and collect high-signal data from illicit marketplaces and forums. • Utilize Flashpoint's industry-leading proprietary platform and external OSINT tools to synthesize complex data. • Drive intelligence outcomes by synthesizing raw data to assess credibility and deduce client relevance. • Create finished intelligence reports and products and peer review the finished intelligence products of others. • Drive community engagement by presenting at community calls and proactively proposing new content.

• Establish and lead the threat hunting program (10%) • Formulate hunting hypotheses based on priority threats (15%) • Conduct proactive and ad hoc hunting exercises (25%) • Validate and escalate relevant uncovered threats (10%) • Automate and orchestrate the hunting process (30%) • Document the process and train the team (5%) • Design and implement reporting metrics (5%)

• Monitor and analyze security events to identify potential threats and vulnerabilities within the organization's infrastructure. • Utilize advanced threat intelligence sources, security tools, and techniques to detect and investigate security incidents, assess the impact, and recommend appropriate mitigation strategies. • Collaborate with cross-functional teams to develop and implement proactive measures to enhance the organization's security posture and minimize risk exposure. • Develop and execute strategic plans for proactive threat-hunting initiatives to identify and mitigate potential security threats before they escalate. • Conduct in-depth analysis of security logs, network traffic, and endpoint data to identify anomalous behavior and indicators of compromise (IOCs). • Investigate and triage security alerts to determine the severity, impact, and root cause of security incidents. • Develop, test and validate detection engineering automation in order to combat threats, emergent risks and vulnerabilities to enhance SOC detections and response times.

• Proactively hunt for hidden threats across endpoints, networks, cloud, and applications. • Develop and execute hypotheses-driven threat hunting campaigns using security data and intelligence. • Analyze large volumes of log, endpoint, and network data to uncover anomalous or malicious activity. • Research and track adversary TTPs and leverage frameworks such as MITRE ATT&CK. • Collaborate with Detection Engineering to refine detection rules, signatures, and playbooks to improve threat detection. • Collaborate with Incident Response and SOC teams to investigate and contain security incidents. • Provide technical mentorship to junior threat hunters and SOC analysts. • Partner with Threat Intelligence to operationalize indicators and adversary insights. • Contribute to continuous improvement of detection engineering and hunting methodologies.