> Markdown version of [/jobs/ext/1911768-the-problem](https://www.wearedevelopers.com/jobs/ext/1911768-the-problem). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # The Problem - **Company:** Flock Safety - **Location:** United States (Remote available) - **Experience:** Expert - **Salary:** $140,000.0 - $175,000.0 - **Contract:** Permanent contract - **Skills:** Cyber Security, Digital Forensics, Intrusion Detection and Prevention, Scripting, Mitre Att&ck, Malware, Cyber Threat Analysis, Cybercrime, Splunk - **Published:** August 4, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=6f47f5fbe75432e3 ## About the Role * Demonstrated experience in digital forensics, incident response, and threat hunting across cloud platforms, enterprise infrastructure, and operational or IoT environments. * Hands-on expertise using enterprise security tooling, developing custom scripts, and authoring high-fidelity detection rules in Splunk SPL, YARA, or Sigma. * Practical capability in security automation integrations, malware analysis, or sandboxing technologies to accelerate threat investigation workflows. * Strong cross-functional technical communication skills to collaborate with Engineering, Product, and Infrastructure teams on architecture improvements. * Deep understanding of cyber threat intelligence frameworks, MITRE ATT&CK mapping, and technical threat modeling. ## Description * Lead end-to-end threat hunting campaigns across cloud environments, IoT hardware systems, and corporate applications to detect advanced persistent threats and visibility gaps. * Partner with the Offensive Security team to validate custom detection rules and translate findings into high-fidelity detections mapped to the MITRE ATT&CK framework. * Design and execute technical exercise scenarios and tabletop exercises that test incident response readiness against real-world cyber risks. * Serve as a technical escalation point for deep-dive root cause analysis on complex incidents and mentor junior engineers to elevate team technical capabilities. * Integrate security automation platforms and intelligent workflows to streamline threat analysis and accelerate operational response capabilities., * This isn't a routine SOC analyst or Tier 1 triage job, you will focus on proactive threat hunting, deep adversary pursuit, and advanced detection engineering. * This is not a purely offensive red-teaming role, you will collaborate with offensive security to validate detections and improve overall defense and response posture. * This isn't a hands-off strategic management position, you will execute technical threat hunts, analyze suspicious binaries, and write detection logic directly. ## Related Videos - [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data) - [JavaScript? No. Java Scripts! - Scripting with Java](https://www.wearedevelopers.com/videos/2094-javascript-no-java-scripts-scripting-with-java) - [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture) - [Enhancing Workload Security in Kubernetes](https://www.wearedevelopers.com/videos/356-enhancing-workload-security-in-kubernetes) - [Capture the Flag 101](https://www.wearedevelopers.com/videos/416-capture-the-flag-101) - [Intermediate Bitcoin Script](https://www.wearedevelopers.com/videos/25-intermediate-bitcoin-script) ## Related Articles - [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy) - [Dev Digest 191: Malware interviews, EU ❤️ Open Source and Skilled Agents](https://www.wearedevelopers.com/magazine/645-dev-digest-191-malware-interviews-eu-open-source-and-skilled-agents)