Job Description

Job Description: Senior Threat Hunting & AI Security Specialist

Role Overview

We are seeking an experienced Threat Hunting & AI Security Specialist to lead proactive cyber defense initiatives across enterprise environments, with a strong focus on AI system security, advanced threat hunting, and compliance-driven risk management. The role will be responsible for detecting sophisticated adversaries, securing AI platforms (e.g., Mythos), and aligning security controls with regulatory and insurer expectations. The candidate must combine deep technical hunting capability, AI security domain expertise, and governance/compliance acumen, and will play a key role in executing the enterprise AI/Mythos Strategy, ensuring AI adoption is secure, monitored, and aligned with evolving threat landscapes and regulatory requirements.

Key Responsibilities

1. Proactive Threat Hunting & Advanced Detection

• Lead enterprise-wide proactive threat hunting programs, shifting from reactive SOC operations to intelligence-driven detection.

• Perform advanced threat hunting using:

o MITRE ATT&CK framework

o Behavioral analytics & anomaly detection

o Endpoint, network, identity, and cloud telemetry

• Develop and execute hypothesis-based hunting campaigns targeting:

o Lateral movement

o Credential abuse

o Insider threats 

o Fileless malware and zero-day activity

• Design and deploy custom detection rules/use cases across SIEM, XDR, and SOAR platforms.

• Validate detection effectiveness through simulation exercises and attack emulation. 

• Support transition to AI-augmented and intelligence-driven detection capabilities aligned to enterprise security maturity initiatives.

2. Mythos Platform Threat Modeling & Security Architecture 

• Perform comprehensive threat modeling for Mythos AI platform, including: 

o Data flow analysis

o Trust boundaries identification 

o Threat scenarios (STRIDE / ATT&CK-based mapping) 

• Identify AI-specific risks such as: 

o Model poisoning 

o Prompt injection attacks 

o Data leakage via inference

o Adversarial ML manipulation 

• Conduct end-to-end AI attack surface analysis across model lifecycle, APIs, and integrations. 

• Lead Mythos platform threat modeling and enterprise AI risk identification efforts as part of AI/Mythos Strategy execution.

Required Skills & Experience Technical Expertise 

• 10+ years in cybersecurity with strong focus on:

o Threat hunting / incident response 

o SIEM (Microsoft Sentinel, Splunk, QRadar) 

o EDR/XDR platforms 

• Strong knowledge of: 

o MITRE ATT&CK framework

o Threat intelligence platforms 

o KQL / SPL / query-based hunting AI Security & Threat Modeling 

• Hands-on experience in: 

o AI/ML security concepts

o Threat modeling methodologies 

• Understanding of AI data lifecycle security controls and model risk management 

• Experience designing AI-focused detection and monitoring capabilities aligned to enterprise platforms 

Governance & Compliance 

• Experience in: 

o Regulatory mapping (NIST, ISO, GDPR)

o Security audits and compliance reporting 

• Ability to align technical controls with business, insurer, and regulatory expectations 

Automation & Tools 

• Experience with: 

o SOAR platforms and playbook creation 

o Cloud security (Azure / AWS) 

o Security automation frameworks 

• Experience integrating AI detection and threat intelligence into enterprise security tooling ecosystems

͏

Do

1. Design and develop enterprise cyber security strategy and architecture

a. Understand security requirements by evaluating business strategies and conducting system security vulnerability and risk analyses

b. Identify risks associated with business processes, operations,

information security programs and technology projects

c. Identify and communicate current and emerging security threats and design security architecture elements to mitigate threats as they emerge

d. Identify security design gaps in existing and proposed architectures and recommend changes or enhancements

e. Provide product best fit analysis to ensure end to end security covering different faucets of architecture e.g. Layered security, Zoning, Integration aspects, API, Endpoint security, Data security, Compliance and regulations

f. Demonstrate experience in doing security assessment against NIST Frameworks, SANS, CIS, etc.

g. Provide support during technical deployment, configuration, integration and administration of security technologies

h. Demonstrate experience around ITIL or Key process-oriented domains like incident management, configuration management, change management, problem management etc.

i. Provide assistance for disaster recovery in the event of any security breaches, attacks, intrusions and unusual, unauthorized or illegal activity

j. Provide solution of RFP’s received from clients and ensure overall design assurance

͏

i. Develop a direction to manage the portfolio of to-be-solutions including systems, shared infrastructure services, applications, hardware related to cyber risk security in order to better match business outcome objectives

ii. Analyse technology environment, enterprise specifics, client requirements to set a collaboration design framework/ architecture

iii. Depending on the client’s need with particular standards and technology stacks create complete RFPs

iv. Provide technical leadership to the design, development and implementation of custom solutions through thoughtful use of modern technology

v. Define and understand current state solutions and identify improvements, options & tradeoffs to define target state solutions

vi. Clearly articulate and sell architectural targets, recommendations and reusable patterns and accordingly propose investment roadmaps

vii. Evaluate and recommend solutions to integrate with overall technology ecosystem

viii. Tracks industry and application trends and relates these to planning current and future IT needs

͏

2. Stakeholder coordination & audit assistance

a. Liaise with stakeholders in relation to cyber security issues and provide timely support and future recommendations

b. Provide assistance in maintaining an information security risk register and help with internal and external audits relating to information security

c. Support audit of security best practices and implementation of security principles across the organization, to meet business goals along with customer and regulatory requirements

d. Assist with the creation, maintenance and delivery of cyber security awareness training to team members and customers

e. Provide training to employees on issues such as spam and unwanted or malicious emails

͏

Deliver