Threat Hunting & Threat Modeling Analyst (L2)
Summary
The L2 Threat Hunting & Threat Modeling Analyst serves as a critical component of the security operations framework, tasked with conducting both routine and bespoke investigative hunts to proactively identify potential threats. This position leverages automated threat modeling platforms, such as ThreatModeler, to evaluate the security posture of specific applications and projects. The role involves receiving escalated incidents from Level 1 or SOC teams to perform deep-dive forensic analysis, generating comprehensive technical documentation, and collaborating with Level 3 Subject Matter Experts to resolve complex hypotheses and make strategic risk decisions. By bridging the gap between raw intelligence and actionable defense, this analyst ensures that the organization remains resilient against evolving adversary tactics.
documenting findings with robust evidence and explicit conclusions to validate security postures.
Intelligence-Driven Operations: Integrate external threat intelligence feeds to refine hunt parameters, prioritizing activities based on real-world indicators and stakeholder requirements.
Automated Threat Modeling: Conduct security assessments on designated applications and projects using automated modeling tools to map trust boundaries, identify attack vectors, and pinpoint control deficiencies.
Risk Mitigation and Reporting: Systematically document identified risks and propose effective countermeasures, ensuring all assessment artifacts are tracked to resolution through relevant business stakeholders.
Red Team Collaboration: Facilitate adversary simulation exercises by managing scope definitions, ensuring adherence to rules of engagement, and maintaining evidence integrity for post-exercise reporting.
Operational Knowledge Transfer: Translate red team findings into actionable defens