Threat Hunter

Company Overview

Arctiq is a global, intelligence‑driven technology services company delivering professional and managed services across Hybrid Cloud Infrastructure, Networking & Connected Experiences, Cybersecurity, Data & AI, Autonomous Operations & Intelligence, and Enterprise Service Management. We help organizations operate, secure, and modernize complex environments by unifying infrastructure, networking, data, security, automation, and observability under a single, integrated operating model. Our work focuses on helping customers reduce operational friction, improve resilience, and make better, faster decisions as their environments evolve. Arctiq builds on decades of industry expertise and a customer‑centric ethos to deliver exceptional value to clients across diverse industries.

Position Overview

Arctiq is seeking a Threat Hunter to join our advanced security team within a fast‑paced MSSP environment. You will proactively identify cyber threats across a variety of client environments by combining threat intelligence, behavioral analytics, and expert intuition. This role requires a deep understanding of attacker techniques, endpoint/network telemetry, and experience working across diverse technology stacks. You will play a critical role in enhancing threat detection capabilities and advising clients on how to improve their security posture.

Responsibilities

• Perform proactive threat hunting across multi‑tenant client environments using SIEM, EDR, NDR, and other telemetry sources.
• Drive proactive threat hunting by modeling attacker behavior and testing hypotheses against client data using threat intel and contextual baselines.
• Analyze indicators of compromise (IOCs) and behavior patterns to uncover stealthy threats.
• Investigate anomalies surfaced through tools or analyst escalations and provide deep‑dive analysis.
• Create and tune detection content (SIEM rules, correlation logic, signatures) to improve threat visibility.
• Document hunt processes, findings, and incident recommendations for internal stakeholders and clients.
• Assist in incident response efforts including containment, eradication, and recovery.
• Recommend security control improvements based on observed threats and hunting outcomes.
• Partner across internal security teams to enhance detection strategies and drive continuous improvement of the MSSP threat detection framework.
• Engage with clients during onboarding, security reviews, or post‑incident briefings.
• Maintain and enhance security solutions such as firewalls, IDS/IPS, DLP, vulnerability scanners, PAM, and endpoint protection tools for clients.
• Monitor the evolving threat landscape and incorporate the latest intelligence into proactive threat hunting efforts.

Qualifications

• Bachelor’s degree/Diploma in Computer Science, Cybersecurity, Information Systems, or a related field, or equivalent practical experience.
• 3+ years of hands‑on experience in threat hunting, incident response, SOC analysis, or threat intelligence.
• Solid understanding of Windows and Linux operating systems and authentication protocols.
• Familiarity with cloud security platforms (AWS, Azure, GCP).
• Strong grasp of security frameworks (MITRE ATT&CK, NIST, etc.).
• Proficiency with EDR and SIEM tools (e.g., CrowdStrike, SentinelOne, Splunk, QRadar).
• Knowledge of networking fundamentals (protocols, firewalls, routing, etc.).
• Experience with malware analysis, packet capture analysis, and host/network forensics.
• Skilled in scripting or automation (Python, PowerShell, etc.) for hunt support and data enrichment.
• Customer‑focused mindset with the ability to communicate effectively and confidently with technical and non‑technical stakeholders.
• Strong analytical, troubleshooting, and problem‑solving skills.
• High attention to detail, discretion, and integrity in handling sensitive client data.
• Ability to manage multiple incidents and prioritize tasks under pressure.
• Self‑starter with a passion for continuous learning and cybersecurity excellence.
• Hands‑on incident response or SOC experience in a service provider environment.
• Relevant certifications such as GCIH, GCFA, GCIA, Security+, CEH, or CISSP.

Benefits

• Competitive salary and performance‑based incentives.
• Outstanding health, dental, and vision insurance plans.
• Retirement savings plan with employer matching.
• Flexible work schedule and remote work options.
• Professional development and training opportunities.
• Collaborative and inclusive work culture with opportunities for career growth.

Arctiq is an equal opportunity employer. Accommodations are available throughout the interview process and beyond. We celebrate an inclusive work environment and welcome members of all backgrounds and perspectives to apply.