Threat Hunter Jobs
Threat hunters proactively search for adversaries that already slipped past automated detection - forming hypotheses from threat intelligence, querying telemetry at scale, and turning each hunt into new detections. It sits between SOC analysis and detection engineering, and it is one of the clearest promotion paths out of a senior SOC seat.
21 live Threat Hunter roles across the cybersecurity employers we track - updated hourly, apply directly.
Get new Threat Hunter jobs in your inbox
Join 550+ security professionals · Weekly, free, unsubscribe anytime
Threat IntelligenceRemote
Posted Oct 14
Posted Oct 6
Posted Oct 5
A$150,000 - A$170,000Detection EngineeringRemote
Posted Sep 24
Posted Sep 23
$155,520 - $194,400Detection EngineeringRemote
Posted Sep 4
Posted Aug 21
Posted Aug 18
Posted Aug 14
Posted Jul 22
Posted May 8
Posted Apr 20
Explore related searches
- Browse the Detection & SOC hub for the full specialization.
- Prefer remote? See remote cybersecurity jobs.
- Compare pay in the cybersecurity salary report.
- Security Researcher jobs
- Incident Responder jobs
- MDR jobs
Frequently asked questions
- What does a Threat Hunter do?
- Threat hunters proactively search for adversaries that already slipped past automated detection - forming hypotheses from threat intelligence, querying telemetry at scale, and turning each hunt into new detections. It sits between SOC analysis and detection engineering, and it is one of the clearest promotion paths out of a senior SOC seat.
- How many Threat Hunter jobs are there right now?
- We are tracking 21 live Threat Hunter roles across the cybersecurity employers we monitor, updated hourly. Each listing links straight to the employer's own application page.
- Are Threat Hunter jobs remote?
- Some are. Many Threat Hunter roles are hybrid or on-site because of tooling and data-sensitivity, but fully-remote listings appear regularly - filter the board or browse our remote cybersecurity jobs page.
- What certifications help you get a Threat Hunter job?
- GCIH or CySA+ is the credential most often named in Threat Hunter postings. Beyond a certificate, hands-on evidence - a home lab, CTF write-ups, or public detections - carries the most weight in screening.