Threat Hunter

Intensity Global Group (IG) is a cybersecurity technology consulting company specializing in information security, incident response, and cyber intelligence.

The organization has developed advanced attack and detection methodologies that emulate real-world hackers, enabling clients to uncover unknown threats and hidden vulnerabilities. IG delivers cutting-edge Israeli cyber technologies and comprehensive security services through experienced cybersecurity researchers and experts.

Since 2008, the company has been helping government agencies, financial institutions, global technology firms, and other organizations strengthen their resilience against sophisticated and ongoing cyber threats.

IG operates globally with offices in Saint Louis (USA), Melbourne (Australia), and Netanya/Poleg (Israel), serving clients across diverse sectors.

Role Description:

The Threat Hunter role is a full-time, hybrid position based in Petah Tikva.

In this role, the Threat Hunter proactively hunts for advanced threats across client environments, identifying indicators of compromise, unknown attacks, vulnerabilities, suspicious activity, and anomalous behaviors that may bypass traditional security controls.

Day-to-day activities include analyzing logs and telemetry from multiple security tools, correlating events and behavioral patterns, investigating suspicious activity, performing root-cause analysis, and documenting findings with clear, actionable recommendations.

The Threat Hunter will collaborate closely with Incident Response, SOC, and Cyber Intelligence teams to investigate security events, identify suspicious behavioral patterns, refine detection rules, improve threat hunting methodologies, and support ongoing investigations.

The role also includes developing and improving Threat Hunting playbooks, detection rules, and use cases, contributing to the continuous improvement of security operations, and supporting the implementation and enforcement of security policies based on identified threats.

The Threat Hunter will present technical findings and recommendations to internal stakeholders and clients in a clear, structured, and actionable manner.

Knowledge and experience in areas such as Reverse Engineering, Malware Analysis, or Code Analysis are considered an advantage and can contribute to the broader technical capabilities of the team.

Qualifications

• At least 3 years of hands-on experience in Threat Hunting, Cybersecurity, Security Operations, Incident Response, or a related field.
• Strong threat hunting and incident investigation capabilities, including experience analyzing security events, identifying indicators of compromise, and investigating advanced threats.
• Proven ability to identify anomalies, suspicious behaviors, attack patterns, and potential indicators of compromise across diverse data sources.
• Experience analyzing logs and telemetry, correlating events, and identifying behavioral patterns that may indicate malicious activity.
• Hands-on experience with SIEM, EDR/XDR, and other security monitoring and detection tools.
• Ability to translate investigation findings into Detection Rules, Use Cases, Threat Hunting Queries, and security policies.
• Solid understanding of network security concepts, operating systems (Windows and Linux), and common attack vectors, including ransomware, malware, and zero-day exploits.
• Knowledge of cyber intelligence practices, including threat modeling, adversary Tactics, Techniques, and Procedures (TTPs), and frameworks such as MITRE ATT&CK.
• Experience creating technical documentation, incident reports, investigation summaries, and Threat Hunting playbooks.
• Strong analytical and problem-solving skills, attention to detail, and the ability to work independently in a fast-changing threat landscape.
• Ability to communicate technical findings clearly and effectively to both technical and non-technical stakeholders.
• Prior experience in a SOC, Incident Response team, Threat Intelligence, or Cyber Consulting environment is an advantage, particularly within highly regulated or critical sectors.
• Knowledge or hands-on experience in Reverse Engineering, Malware Analysis, or Code Analysis is an advantage.
• Relevant certifications such as GCIH, GCFA, GCIA, CISSP, OSCP, or similar are an advantage.

• [email protected]