Threat Hunting Expert

Remote (within Europe) · Full-time

As an experienced Threat Hunter & Cyber Threat Intelligence Expert, you bring battle-tested expertise in threat hunting, reverse engineering malware, and threat intelligence, with hands-on experience across Linux, Windows, network protocols, and cloud environments. Certifications like GIAC Incident Handler, Certified Threat Intelligence Analyst, or Certified Reverse Engineering, plus proven enterprise-class incident response, set you apart. You excel at dissecting sophisticated threats and turning intel into actionable detection logic.

You will be one of Haste's first specialists building the threat intelligence backbone that powers lightning-fast detection across HPC clusters, AI environments, quantum computers, and enterprise infrastructure.

Key responsibilities:

Adversary TTP Mapping: Collaborate with research teams on analyzing threat actor Tactics, Techniques, and Procedures (TTPs) and Indicators of Compromise (IoCs) to inform product capabilities.
Proactive Hunt Campaigns: Developing hypotheses to proactively search for undetected, sophisticated threats within telemetry data to identify product gaps.
Detection Content Engineering: Translating manual, expert-driven hunt findings into automated, high-fidelity detection rules, signatures, and behavioral models.
Automated Intelligence Extraction/Ingestion: Ingesting raw intel feeds and extract contextualized insights for product features with our AI/ML experts.
Product Performance Validation: Testing security controls against real-world attack simulations (purple teaming) to measure detection coverage, precision, false-positive rates and lead Proof of Concepts with customers.
Threat Modeling & Prioritization: Analyzing emerging vulnerabilities, misconfigurations, and exploitation trends to guide engineering prioritization of security features.
Documentation & Reporting: Creating detailed hunt reports, whitepapers on new threats, and documentation that helps customers understand, mitigate, and respond to risks.

What it's like working with us:

Impact from day oneYour work shapes how we protect current and future infrastructure.
Top Tier-expertsJoin security veterans solving globally unique problems in threat detection for the future of compute.
Fully remote, real ownershipWe care about results, not clock-in times.

Location: Remote (within Europe)

Apply by email All open roles

A CV or a profile link is enough. Applicant privacy information: section 4 of the privacy notice.