Senior Engineer (Threat Hunting)

Join Cboe's Security Operations organization as a Senior Engineer (Threat Hunting). In this role, you will define, advance, and execute the enterprise approach to detection engineering, threat hunting, and adversary emulation. You will lead complex threat hunts, partner with stakeholders to design and execute adversary emulation scenarios, and translate findings into durable detections and architectural enhancements. You will also act as the technical lead during high-severity security incidents and influence security strategy and investment decisions.

Responsibilities

• Defining, advancing, and executing the enterprise approach to detection engineering, threat hunting, and adversary emulation.
• Leading complex, hypothesis-driven threat hunts, partnering closely with stakeholders to design and execute adversary emulation scenarios.
• Owning the enterprise detection engineering capability end-to-end, including standards, patterns, quality bars, and long-term technical direction.
• Experience balancing hands‑on execution with strategic influence, knowing when to build directly and when to enable others
• Deep expertise in attacker tradecraft, adversary behaviors, and defensive detection techniques across multiple domains

Requirements

• Bachelor’s degree or equivalent practical experience

Proficiency in scripting and automation for security operations

• Strong hands‑on experience with SIEM, EDR, cloud security platforms, and large‑scale log analytics (Google SecOps, Defender XDR, Crowdstrike)
• 5-8+ years of experience in cybersecurity operations, detection engineering, threat hunting, or offensive security
• Strong communication skills, including the ability to explain complex technical risk to senior security and technology leaders
• The ability to operate with near‑complete autonomy, setting technical direction rather than receiving it
• A proven ability to solve ambiguous, systemic, cross‑organizational security problems with minimal direction
• Candidates must be legally authorized to work in the United States without the need for employer sponsorship now or in the future
• Bachelor's Degree in Cybersecurity or Computer Science
• CISSP, CASP or other related security certifications
• Specific experience with Google Secops SIEM, the Microsoft Security Stack, or ProofPoint Email Security Services
• System Administration experience in Windows or Linux
• Proven ability to script and automate tasks

Pay

USD 130,900 - 169,400