Senior Threat Hunting & Incident Response Engineer

About the role

Snowbit is a cybersecurity technology innovator with a vision to empower organizations across the globe to quickly, efficiently, and cost-effectively ready themselves to address omnipresent cyber risk. Built off years of Israeli cybersecurity experience, Snowbit is looking to offer the broadest managed detection and response offering available today.

What you'll do

• The role splits roughly 40% proactive hunting, 25% detection engineering, 20% incident analysis support and reporting
• That mix shifts during active customer incidents
• Translate threat intelligence, MITRE ATT&CK techniques and post-incident lessons into testable hunt hypotheses with defined data requirements and success criteria
• Build and maintain a reusable hunt library so a hunt proven in one environment can be re-run in another with known adaptations
• Establish baselines for normal behaviour per environment and identify the deviations worth escalating

What you need

• Incident response
• SQL
• LLMs
• Kubernetes