> Markdown version of [/jobs/ext/4402193-cloud-threat-hunter-cyber](https://www.wearedevelopers.com/jobs/ext/4402193-cloud-threat-hunter-cyber). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cloud Threat Hunter (Cyber)

- **Company:** Synechron Inc
- **Location:** Mundelein, IL, United States
- **Experience:** Experienced
- **Salary:** $110,000.0 - $125,000.0
- **Contract:** Permanent contract
- **Skills:** Kubernetes Security, Amazon Web Services, Data Analysis, Bash Shell, Business Systems, Cloud Computing, Cloud Computing Security, Cloud Engineering, Cyber Security, Query Languages, DevOps, Digital Forensics, Domain Name System (DNS), Emulators, Identity and Access Management, Python (Programming Language), PCI Data Security Standards, Windows PowerShell, Kusto Query Language, Security Information and Event Management, SQL Databases, AWS Cdk, Data Logging, Scripting, Software Security, Mitre Att&ck, Malware, Cyber Threat Analysis, Amazon Virtual Private Cloud (VPC), Cloudformation, Kubernetes, Information Technology, Cybercrime, Microsoft Sentinel, Terraform, Splunk, Docker, Security Orchestration, Automation & Response
- **Published:** October 13, 2026
- **Apply:** https://www.thejobnetwork.com/job/8b087ad2-9845-4293-8b21-86d89ea227e3/cloud-threat-hunter-cyber

## About the Role

n
\n

 * Overall 8+ years of IT experience is required
\n

 * 3+ years of experience in cybersecurity, threat hunting, security operations, incident response, or cloud security.
\n

 * 2+ years of hands-on experience securing or investigating AWS cloud environments.
\n

 * Strong understanding of AWS security principles, identity and access management, cloud networking, logging, and monitoring.
\n

 * Experience analyzing AWS CloudTrail, VPC Flow Logs, GuardDuty findings, IAM events, DNS logs, and other cloud telemetry.
\n

 * Experience with SIEM, SOAR, EDR, XDR, or cloud-native security platforms.
\n

 * Experience developing queries, detections, dashboards, or analytics using tools such as Splunk, Microsoft Sentinel, Elastic, Chronicle, or similar platforms., * Knowledge of threat-hunting methodologies, incident response, digital forensics, and security investigation techniques., * Familiarity with the MITRE ATT&CK framework and common cloud attack paths.
\n

 * Experience with scripting or automation using Python, PowerShell, Bash, or similar languages.
\n

 * Strong analytical, investigative, documentation, and problem-solving skills.
\n

 * Excellent written and verbal communication skills.
\n

 * Ability to work effectively in a fast-paced environment and manage multiple investigations or priorities.
\n, * Experience with AWS Organizations, Control Tower, Security Hub, GuardDuty, Detective, Macie, Inspector, and IAM Access Analyzer.
\n

 * Experience securing containers and orchestration platforms, including Docker and Amazon EKS/ECS.
\n

 * Experience with Kubernetes security and cloud-native application security.
\n

 * Knowledge of Infrastructure as Code security, including Terraform, CloudFormation, or AWS CDK.
\n

 * Familiarity with threat intelligence platforms, malware analysis, and adversary emulation.
\n

 * Experience creating detection content using Sigma, YARA, KQL, SPL, SQL, or similar query languages.
\n

 * Experience with cloud security posture management and cloud-native application protection platforms.
\n

 * Knowledge of compliance and security frameworks such as NIST, CIS AWS Foundations, ISO 27001, SOC 2, PCI DSS, HIPAA, or FedRAMP.
\n

 * Experience working in a Security Operations Center or Computer Security Incident Response Team.
\n

## Description

The successful candidate will work closely with Security Operations, Cloud Engineering, Infrastructure, DevOps, Incident Response, and Risk teams to improve threat detection, strengthen cloud security controls, and protect critical business systems and data.