Threat Hunting Team Lead (Cyber Security)

The role

You will lead the proactive threat hunting program across corporate IT, cloud platforms, and data center infrastructure. You will manage a team of threat hunters to identify advanced threats and improve detection capabilities.

What you will do

• Lead and manage the Threat Hunting team, including mentoring, prioritization, and professional development.
• Define and execute the proactive threat hunting strategy across corporate IT, cloud environments, and data center infrastructure.
• Lead hypothesis-driven threat hunting activities to identify advanced threats and malicious activity.
• Develop and improve threat hunting methodologies, playbooks, and operational procedures.
• Leverage threat intelligence, adversary TTPs, and MITRE ATT&CK to drive hunting campaigns.
• Hunt across endpoint, identity, network, cloud, and application telemetry.
• Collaborate with SOC and Incident Response teams to validate findings and support investigations.
• Partner with Detection Engineering to convert successful hunts into automated detections.
• Work with Security Engineering and Infrastructure teams to identify security gaps.
• Produce technical reports, executive summaries, and threat assessments.

Required qualifications

• 6+ years of experience in cyber security, with a focus on threat hunting, incident response, detection engineering, or SOC operations.
• 2+ years of experience leading technical security teams.
• Strong understanding of attacker methodologies, post-exploitation techniques, and modern cyber threats.
• Hands-on experience conducting hypothesis-driven threat hunting across endpoint, network, identity, and cloud environments.
• Deep knowledge of MITRE ATT&CK and adversary tactics, techniques, and procedures (TTPs).
• Experience working with EDR/XDR, SIEM, cloud security platforms, and threat intelligence sources.
• Experience investigating advanced persistent threats (APTs), ransomware, insider threats, and cloud-based attacks.
• Strong scripting or query skills (e.g., KQL, SPL, SQL, Python, PowerShell).
• Strong analytical, investigative, and problem-solving skills.
• Excellent written and verbal communication skills in Hebrew and English.

Nice to have

• Experience hunting across AWS, GCP, or Azure cloud environments.
• Familiarity with large-scale enterprise, cloud-native, or AI infrastructure environments.
• Experience developing detection rules and behavioral analytics.
• Knowledge of malware analysis, digital forensics, or reverse engineering concepts.
• Experience with threat intelligence platforms and threat hunting frameworks.
• Relevant certifications such as GCFA, GCTI, GREM, GCIA, CISSP, or equivalent.
• BSc in Computer Science, Information Security, or a related field.

Benefits

• Competitive compensation
• Career growth and learning opportunities
• Flexibility and ownership
• Collaborative and innovative culture
• Opportunity to work on impactful AI projects
• International environment and talented teams

Before you apply

• Applicants must be authorized to work in the country in which they apply.
• Will be required to provide proof of employment eligibility as a condition of hire.

About the company

Nebius is building a full-stack AI cloud platform that supports developers and enterprises. The company is listed on Nasdaq and is headquartered in Amsterdam.