We are hiring a Senior Threat Hunting Specialist who combines deep threat-hunting expertise with practical purple-team simulation skills to support an AI-driven detection program. The ideal candidate understands attacker…
Job Overview Fortinet is seeking an experienced Cloud Security Developer to join the FortiCASB team. This role focuses on designing, developing, and optimizing our SaaS based security platform, ensuring secure and scalab…
Telco/MSSP Channel Account Manager Role Overview Join Fortinet, a cybersecurity pioneer with over two decades of excellence, as we continue to shape the future of cybersecurity and redefine the intersection of networking…
Distribution Channel Account Manager Lisbon, Portugal Objective: In this key role, you will drive Fortinet Channel business through our Distribution Channel. Manage and Develop key relationships with Executive level and …
Distribution Channel Account Manager - Spain (Madrid)
Madrid, Community of Madrid, Spain · On-site
Senior$89M raised
Distribution Channel Account Manager Madrid, Spain Objective: In this key role, you will drive Fortinet Channel business through our Distribution Channel. Manage and Develop key relationships with Executive level and day…
District Channel Development Manager - West Germany
Frankfurt, Hesse, Germany · Remote OK
Senior$89M raised
District Channel Development Manager – Region West Germany Location: home office in the region OR Fortinet Frankfurt office Our market position and solution effectiveness have been widely validated by industry analysts, …
Skills: Direct Sales Account Management, Channel Management, Virtual Team Leadership, Project Orchestration, Strategic Planning
Manager, Business Development – France Location: Paris, France Language: Fluent/Business Level proficiency French and English This role requires to be in the office for 4 days/week. Join Fortinet, a cybersecurity pioneer…
Skills: Team Management, Business Development, Inside Sales, Coaching, Performance Management
Join Fortinet, a cybersecurity pioneer with over two decades of excellence, as we continue to shape the future of cybersecurity and redefine the intersection of networking and security. At Fortinet, our mission is to saf…
You would act as an Inside Regional Account Manager based in Vienna for our Enterprise segment, driving direct sales into a territory of enterprise accounts. You will be responsible for developing new business, expanding…
Major Account Manager - Entreprise sector - Kazakhstan
Astana, Kazakhstan · On-site
Senior$89M raised
Fortinet From the start, the Fortinet vision has been to deliver broad, truly integrated, high-performance security across the IT infrastructure. Today, we secure the largest enterprises, service providers and government…
Location: Nagoya, Japan Join Fortinet, a cybersecurity pioneer with over two decades of excellence, as we continue to shape the future of cybersecurity and redefine the intersection of networking and security. At Fortine…
Skills: Lead Qualification, Outbound Prospecting, Salesforce.com, Inside Sales, Account Management
Location: Japan (Tokyo/Osaka) Join Fortinet, a cybersecurity pioneer with over two decades of excellence, as we continue to shape the future of cybersecurity and redefine the intersection of networking and security. At F…
Skills: Server Virtualization, Linux Server Administration, Storage Administration, Openstack, Container Management
Raleigh, North Carolina, United States · Remote OK
Senior$89M raised
We are seeking a Sales Engineer to partner with a Named Account Manager in a defined territory. This role is designed for a technically strong but strategically minded individual who thrives in customer-facing engagement…
Skills: Pre-sales, Systems Engineering, Cybersecurity Architecture, Zero Trust, SASE
In this key role, you will manage and drive direct sales into Major Enterprise Accounts. Create and implement strategic account plans focused on attaining enterprise-wide deployments of Fortinet products and services. De…
San Francisco, California, United States · Remote OK
$220k–$280k/yr
Senior+$89M raised
In this key role, you will manage and drive direct sales into Major Enterprise Accounts. Create and implement strategic account plans focused on attaining enterprise-wide deployments of Fortinet products and services. De…
In this key role, you will manage and drive direct sales engagements into a set of Named Accounts within your assigned territory. Responsibilities: Primary responsibility will be to create and implement territory plans f…
We are looking for a Fortinet Endpoint Consultant Engineer to deploy, manage, and support Fortinet endpoint security solutions for our customers. This role is focused on customer endpoint protection deployments, fine-tun…
Skills: Fortinet Endpoint Security, EDR, SIEM, TCP/IP, DNS
Join Fortinet, a cybersecurity pioneer with over two decades of excellence, as we continue to shape the future of cybersecurity and redefine the intersection of networking and security. At Fortinet, our mission is to saf…
Skills: Inside Sales, Direct Sales, Business Development, Account Management, Salesforce.com
Join Fortinet, a cybersecurity pioneer with over two decades of excellence, as we continue to shape the future of cybersecurity and redefine the intersection of networking and security. At Fortinet, our mission is to saf…
Skills: Inside Sales, Direct Sales, Business Development, Account Management, Salesforce.com
Sign up with Clera and we'll reach out the moment a role actually fits you — no more spraying applications into the void.
$102k–$124k/yr
Full-time
professional certificate
Medical Coverage, Dental Coverage, Vision Coverage, Health Spending Account, Personal Spending Account, Employee & Family Assistance Plan
Posted 27d ago
~40 hrs/week
Responsibilities
Perform hypothesis-driven threat hunting and design attack simulations to generate telemetry for AI-driven detection programs. Collaborate with ML engineers to define and validate features for detection capabilities while mapping emerging threats to the MITRE ATT&CK framework.
Requirements
Requires over 5 years of experience in threat hunting or SOC/IR with proficiency in Python and database tools like ClickHouse and PostgreSQL. Candidates must demonstrate deep knowledge of attacker TTPs and experience collaborating with data science teams for feature engineering.
Full job description
We are hiring a Senior Threat Hunting Specialist who combines deep threat-hunting expertise with practical purple-team simulation skills to support an AI-driven detection program. The ideal candidate understands attacker TTPs in depth, can design hypothesis-driven hunts from telemetry, and can script concise attack simulations to generate realistic logs and telemetry in a test environment for validating detections. This role focuses on attacker thinking, preparing and conducting simulations, threat detection SIEM query design and SOC detection validation. Moreover, this role will contribute to features design for ML-driven detection capabilities.
As a senior Threat Hunting Specialist, your responsibilities will include:
Perform hypothesis-driven threat hunting projects and translate attacker TTPs into measurable telemetry signals (IOAs/IOCs) suitable for ML feature design.
Collaborate with ML engineers and data scientists to define, propose, and validate candidate features.
Specify feature engineering transformations, labeling rules, sampling strategies, and evaluation metrics; support feature importance and explainability analysis.
Create hypothesis-driven detection reports and dashboards from telemetry sources and perform threat hunting investigations using the insights surfaced by those reports.
Design and execute controlled red-team style simulations (scripted PoCs) in test environments to create labeled datasets for training and validation; ensure simulations are realistic, diverse, and safely scoped.
Track emerging threats, map them to MITRE ATT&CK, and propose new simulation scenarios and detection features as adversaries evolve.
Requirements (Must - have):
5+ years’ experience in threat hunting, SOC/IR, Blue\Red\Purple team experince, or related security roles with demonstrable hunting casework.
Strong understanding of attacker techniques and the ability to decompose attack chains (MITRE ATT&CK fluency).
Proven ability to propose hunting hypotheses and identify relevant telemetry fields/signals.
Experience collaborating with ML or data science teams to define feature requirements, labeling strategies, and validation criteria.
Proficient with ClickHouse and PostgreSQL, and able to produce clear, high-quality security analysis reports based on telemetry and hunting findings.
Practical scripting ability for attack simulation and PoC generation (Python required; PowerShell/Bash/other scripting as applicable). Note: production engineering and model training are handled by the team.
Familiarity with common hunting/detection platforms and telemetry sources (SIEM, EDR/XDR, network and cloud logs, container telemetry).
Strong analytical reasoning, incident investigation mindset, and excellent written/verbal communication skills.
Bonus/Preferred
Industry certifications: GIAC GCFA, GCTI, OSCP/OSCE.
Hands-on red team / adversary emulation experience beyond simple PoCs.
Familiarity with SOAR products and concepts.
Familiarity with ML concepts and validation metrics.
Familiarity with Fortinet product telemetry and tooling — e.g., FortiAnalyzer and FortiSIEM for aggregated and correlation logs, FortiGate traffic/event logs, and FortiEDR endpoint telemetry. Able to map Fortinet event fields to hunting features and to explain which Fortinet logs provide the signals needed for specific TTPs.
About Our Team:
Join our team, known for its collaborative ethos, working seamlessly with global customers, internal engineering teams and product development groups. Our team culture emphasizes continuous learning, innovation, and a strong commitment to customer satisfaction. We embrace Fortinet’s core values of openness, teamwork and innovation, fostering an environment where team members support each other, share knowledge, and leverage AI to solve complex technical challenges. Our inclusive and dynamic team thrives on collaboration and is driven by the shared goal of maintaining Fortinet’s high standards of excellence in cybersecurity solutions.
Why Join Us:
We encourage candidates from all backgrounds and identities to apply. We offer a supportive work environment and a competitive Total Rewards package to support you with your overall health and financial well-being. Embark on a challenging, enjoyable, and rewarding career journey with Fortinet. Join us in bringing solutions that make a meaningful and lasting impact to our 660,000+ customers around the globe.
The Canada base salary range for this full-time position is expected to be between $101,600 - $124,200 annually. Wage ranges are based on various factors including the labour market, job type, and job level. Exact salary offers will be determined by factors such as the candidate’s subject knowledge, skill level, qualifications, and experience.
Fortinet strives to provide you and your family with a comprehensive benefits package. Benefits eligibility starts on your first day of hire and comprises of 100% company paid medical, dental, and vision coverage, including a Health Spending Account and a Personal Spending Account that gives you flexibility to spend where you need it the most. Our Employee & Family Assistance Plan (EFAP) offers you and your family access to various services like counseling, legal advice, mental health resources etc. We also provide critical illness, disability, and life insurance, as well as a Group Registered Retirement Savings Plan (RRSP) with a company match to help you save faster for retirement. We offer competitive Paid Time Off and flexible leave policies, including paid health days, to help you take care of yourself and your family members.
All roles are eligible to participate in the Fortinet equity program. Bonus eligibility is reviewed at time of hire and annually at the Company’s discretion.
Fortinet makes possible a digital world that we can always trust through its mission to protect people, devices, and data everywhere. This is why the world’s largest enterprises, service providers, and government organizations choose Fortinet to securely accelerate their digital journey.
Offices: 899 Kifer Road, Sunnyvale, CA 94086, US · 4190 Still Creek Drive, Suite 400, Burnaby, Canada V5C 6C6, CA · 1 Penn Plaza, Suite 1932, New York, NY 10119, US · 12005 Sunrise Valley Dr, Suite 201, Reston, Virginia 20191, US · 300 Beach Rd, Singapore, Singapore 199555, SG
Network SecurityEnterprise FirewallFirewallIntrusion Prevention System (IPS)VPNAntivirusEmail securityWeb filtering and Web Security GatewayAntispamApplication Control and Visibility
Fortinet makes possible a digital world that we can always trust through its mission to protect people, devices, and data everywhere. This is why the world’s largest enterprises, service providers, and government organizations choose Fortinet to securely accelerate their digital journey.
Offices: 899 Kifer Road, Sunnyvale, CA 94086, US · 4190 Still Creek Drive, Suite 400, Burnaby, Canada V5C 6C6, CA · 1 Penn Plaza, Suite 1932, New York, NY 10119, US · 12005 Sunrise Valley Dr, Suite 201, Reston, Virginia 20191, US · 300 Beach Rd, Singapore, Singapore 199555, SG
Network SecurityEnterprise FirewallFirewallIntrusion Prevention System (IPS)VPNAntivirusEmail securityWeb filtering and Web Security GatewayAntispamApplication Control and Visibility