- Company Name
- Caterpillar Inc.
- Job Title
- Senior Cybersecurity Threat Hunter
- Job Description
-
Job Title: Senior Cybersecurity Threat Hunter
Role Summary: Lead proactive threat hunting on cloud and on‑prem enterprise environments, detect malicious activity, investigate incidents, and improve detection coverage using SIEM, MITRE ATT&CK, and threat intelligence.
Expectations:
- Execute continuous threat hunting and advanced investigations.
- Deliver timely incident response, documentation, and improvement recommendations.
- Rotate on‑call support for high‑priority alerts.
Key Responsibilities:
- Conduct threat hunting across cloud and on‑prem environments, identifying anomalies and emerging threats.
- Perform deep investigations with SIEM technologies, crafting and tuning queries to reveal adversary behaviors and indicators of compromise.
- Analyze authentication flows, access patterns, and telemetry to uncover compromise or advanced attacker techniques.
- Apply cyber threat intelligence and MITRE ATT&CK framework to inform hunting and detection engineering.
- Respond to high‑impact incidents, collaborating with CSIRT and cross‑functional teams to contain and remediate threats.
- Partner with SIEM administrators, vendors, and offensive security teams to enhance visibility and detection capabilities.
- Develop and maintain detection logic throughout the detection development lifecycle, identifying improvement opportunities.
- Validate detection coverage using offensive security knowledge.
- Document findings, investigations, and procedures for technical and non‑technical audiences.
- Support continuous improvement, planning, operational procedure refinement, and CSIRT readiness activities.
Required Skills:
- Proficient in cybersecurity threat hunting across cloud and on‑prem environments.
- Strong SIEM experience: query building, tuning, and log analysis.
- Deep understanding of incident response operations, tools, and workflows.
- Expertise with cyber threat intelligence, MITRE ATT&CK, and threat hunting methodologies.
- Ability to develop and enhance detection logic and contribute to detection engineering.
- Excellent documentation, writing, and communication skills.
- Collaborative mindset with SIEM admins, vendors, offensive security, and CSIRT teams.
- Adaptive, problem‑solving, coachable, and curiosity‑driven.
Required Education & Certifications:
- Bachelor’s degree in Computer Science, Information Security, Cybersecurity, or related field.
- Relevant certifications such as GIAC Cyber Threat Hunting (GCTH), CISSP, or equivalent preferred.
East peoria, United states
On site
Senior
26-03-2026