Senior Exposure Threat Hunter

About the role

NXP is looking for an experienced, highly analytical Senior Exposure Threat Hunter to join its Information Security team in Austin, Texas. The role focuses on proactively identifying, investigating and validating security exposures, attack paths and weaknesses that threat actors could exploit across the enterprise. It suits someone with a background in SOC, Threat Hunting, Security Engineering, Detection Engineering or Incident Response.

Key responsibilities

• Identify, investigate and validate security exposures, misconfigurations and control weaknesses across enterprise environments.
• Run threat hunts to find risks, attacker opportunities and indicators of compromise missed by traditional monitoring.
• Analyze telemetry, logs, identity data, cloud security findings, endpoint activity and threat intelligence to spot security gaps.
• Assess exposures from an attacker's perspective and estimate exploitation scenarios and business impact.
• Use security tools to link assets, identities, privileges and controls, then collaborate with SOC, Vulnerability Management, Engineering, Cloud Security and Incident Response teams to validate findings and support remediation.
• Help build exposure hunting methodologies, tune detection rules and monitor capabilities, and document findings and recommendations clearly.
• Research emerging threats and attacker techniques to improve threat hunting and exposure management.

Required profile

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science or equivalent practical experience.
• At least 5 years in Information Security, preferably in SOC, Threat Hunting, Security Engineering, Detection Engineering or Incident Response.
• Strong understanding of security operations processes, the cyber-attack lifecycle and attacker TTPs.
• Preferred: large-scale enterprise security experience, exposure management or attack surface management work, and certifications such as GCIH, GCFA, GCTI, GCIA or OSCP.

Required skills

• Enterprise security tools: SIEM, EDR/XDR, identity security, cloud security and exposure/attack surface management platforms.
• Attack techniques: initial access, credential abuse, privilege escalation, lateral movement, defense evasion, data access and exfiltration.
• Log and telemetry analysis, MITRE ATT&CK, Cyber Kill Chain and threat hunting methodologies.
• Preferred: Azure, AWS or Google Cloud, detection tuning, threat intelligence and security automation.