Cybersecurity Specialist, Threat Hunt

Cybersecurity Specialist, Threat Hunt

Location: Toronto, ON (Remote)

Full Time Permanent

The Senior Cyber Security Analyst, within Threat Hunting, is a key member of a fast-paced team responsible for proactively detecting and responding to advanced threats targeting our technology infrastructure and web assets. Working independently and as part of a large Cybersecurity team, this position collaborates with both IT and business areas to ensure that we are is best-in-class when it comes to Cybersecurity Operations.

Responsibilities

• Lead and evolve the Threat Hunting program, including strategy development and execution
• Proactively hunt for signs of malicious activity across endpoints, networks, and cloud environments using advanced analytics and threat intelligence
• Involved primarily in Threat Intelligence workstream, in addition to hunting for signs of malicious activity across endpoints, networks, and cloud environments
• Develop hypotheses based on threat intelligence, attack trends, and environmental context, and test them through data analysis and investigation
• Identify gaps in visibility and detection capabilities, and recommend enhancements to tooling and telemetry
• Perform deep-dive investigations into suspicious activity, leveraging threat intelligence, behavioral analytics, and forensic techniques
• Collaborate with Incident Response and Threat Intelligence teams to enrich hunts and investigations
• Support and direct third party hunt team on quarterly hunts
• Develop and maintain hunt playbooks and procedures to ensure repeatability and continuous improvement
• Prepare and deliver detailed reports and executive briefings on hunt findings, threat trends, and mitigation recommendations
• Engage with external threat hunting and intelligence communities to stay ahead of emerging threats

Required Skills:

• 4-6 years of technical experience in a large enterprise environment with demonstrated ability to proactively detect and respond to complex security threats
• 3+ years supporting threat hunting, incident response, or security investigations
• Strong understanding of attacker tactics, techniques, and procedures (TTPs), and experience applying frameworks like MITRE ATT&CK
• Experience with endpoint and network telemetry, log analysis, and behavioral analytics
• Excellent writing and presentation skills to communicate findings, risks, and recommendations to technical and non-technical audiences
• Experience with threat modeling and hypothesis-driven hunting approaches
• Hands-on experience with SIEM, EDR, NDR, and other detection and response technologies
• Ability to correlate data across multiple sources to identify patterns and anomalies

Nice to have skills

• Familiarity with Threat Hunting Platforms and automation tools
• Certification in Security is preferred (e.g. GCFA, GCTI, CISSP, CEH)
• Experience with scripting and automation (Python, PowerShell, etc.) to support hunt operations
• Knowledge of industrial taxonomies like MITRE ATT&CK, Cyber Kill Chain, CAPEC, and STIX
• Experience with cloud environments (AWS, Azure, GCP) and hunting in cloud-native telemetry