Threat Hunter

Company Summary: TENEX is an AI-native, automation-first, built-for-scale Managed Detection and Response (MDR) provider. We are a force multiplier for defenders, helping organizations enhance their cybersecurity posture through advanced threat detection, rapid response, and continuous protection. Our team is composed of industry experts with deep experience in cybersecurity, automation and AI-driven solutions. Backed by leading investors, we are rapidly growing and seeking top talent to join our mission of revolutionizing the AI-Native MDR landscape. We’re a fast growing startup backed by industry experts and top tier investors led by Crosspoint Capital Partners and also backed by Shield Capital, DTCP (formerly Deutsche Telekom Capital Partners), Deepwork Capital, and the Florida Opportunity Fund. Seed round led by Andreessen Horowitz (a16z). As an early employee, you’ll play a meaningful role in defining and building our culture. Get in on the ground floor. We’re a small but well-funded team that just raised a substantial round – joining now comes with limited risk and unlimited upside Job Summary: We are seeking a highly skilled and proactive Threat Hunter to join our Security Operations team. The ideal candidate will have a strong background in hypothesis-driven data analysis, including long tail and anomaly detection, cybersecurity, coupled with experience in leveraging AI and machine learning (ML) technologies, particularly in the context of Google’s SecOps platform (e.g. Google Chronicle), to enhance the detection, analysis, and response to security incidents. This role is integral to safeguarding the organization's digital infrastructure, ensuring rapid detection of threats, and supporting continuous improvement of security processes. Culture is one of the most important things at TENEX.AI http://TENEX.AI—explore our culture deck at culture.tenex.ai http://culture.tenex.ai to witness how we embody it, prioritizing the irreplaceable collaboration and community of in-person work. Key Responsibilities: - Threat Hunting - Proactively search for indicators of compromise (IOCs) and tactics, techniques, and procedures (TTPs) used by threat actors. - Analyze and correlate security telemetry from various sources, including SIEM, EDR, network logs, and threat intelligence feeds. - Conduct threat modeling and hypothesis-driven investigations to uncover hidden threats. - Collaborate with SOC analysts and incident responders to investigate and contain security incidents. - Develop and refine detection rules, signatures, and threat hunting methodologies. - Stay ahead of emerging threats by researching new attack vectors, adversary techniques, and malware trends. - Provide detailed reports on findings, including mitigation strategies and recommendations. - Contribute to the continuous improvement of threat detection capabilities through automation and AI-driven analysis. - Threat Monitoring & Detection: - Monitor security alerts and events across the enterprise network, using both traditional cybersecurity tools and AI/ML-powered threat detection systems. - Leverage Google Chronicle's capabilities for threat intelligence and log analysis, enhancing visibility and providing insights into potential security incidents. - Apply AI to identify patterns, anomalies, and behaviors indicative of potential security incidents, reducing false positives and improving detection accuracy. - Incident Response & Analysis: - Investigate and analyze security incidents and breaches, leveraging AI to automate initial analysis and enhance threat hunting efforts. - Utilize Google SecOps and Chronicle’s advanced tools to centralize security data, correlate events, and accelerate incident response workflows. - Apply machine learning algorithms to identify emerging threats and trends, providing actionable insights for incident response. - Google SecOps & Chronicle Integration: - Work with Google SecOps platform tools to streamline security operations, improve