About the role
As Threat Hunting Lead, you’ll define how modern, AI-assisted threat hunting should work in practice. You will be a part of the product development organization and take deep, hands-on experience from SOC, MDR, or security engineering roles and turn it into clear methodology, quality standards, and product direction. This is not an on-call, live-IR, or service delivery role. Your focus is on setting the bar for great threat hunting, reviewing how autonomous hunts perform, and partnering with engineering and product to capture expert hunter insights and techniques into software.
What you'll do
- Serve as the internal subject matter expert in threat hunting, and partner closely with engineering and product teams to refine workflows, data requirements, and evaluation metrics so that autonomous hunting gets stronger over time.
- Own the overall quality bar for threat hunting in our platform, defining what “good” looks like for autonomous hunts and hunt reports.
- Review and grade AI-driven threat hunts and their outputs, providing structured feedback, gap analysis, and clear recommendations for improvement.
- Engage with customers and internal stakeholders to understand their threat-hunting needs, gather feedback, and provide input on the product roadmap, engineering requirements, and GTM enablement materials.
- Translate threat intelligence and emerging trends into prioritized improvements to hunt content, workflows, and evaluation criteria.
- Curate and maintain Dropzone-recommended and community hunt content, acting as the subject matter expert for what should be included, updated, or retired.
Requirements
- 5+ years of experience in a SOC, MDR/security services provider, or large enterprise security team, with hands-on work in threat hunting.
- Demonstrated ability to design and execute structured threat hunts and to explain your approach, assumptions, and findings clearly.
- Experience working with multiple security data sources and environments (e.g., endpoint, identity, SaaS, cloud, or network), even if you specialize in a subset.
- Comfort operationalizing threat intelligence: taking external reports, feeds, or advisories and turning them into practical, repeatable security value. Hands-on familiarity with threat intelligence platforms and common intel feeds.
- Openness to working with AI/LLM-powered workflows and iterating on them with engineers and data scientists.
- Early-stage startup mindset; you thrive on ambiguity and move with lightspeed execution.
Work Environment/Travel
We are a 100% remote company where you will work from your home with company-provided equipment to set you up for success. Semi-frequent travel to professional office settings and other events locally and nationally; some overnight travel expected.
Compensation
In the spirit of pay transparency, we are excited to share the base salary range below, exclusive of fringe benefits or potential bonuses. In addition, all compensation packages include significant above market new hire equity grants because we believe in rewarding long term value creation. If you are hired at Dropzone your final base salary compensation will be determined based on factors such as geographic location, skills, education, and/or experience. In addition to those factors, we believe in the importance of pay equity and consider internal equity of our current team members as a part of any final offer. Please keep in mind that hiring at the maximum of the range would not be typical to allow for future and continued salary growth. We also offer a generous benefits package, including company paid health insurance, 401K Plan with employer match, Self-Managed PTO, parental leave, and more.