About the role
You have a clear vision of where your career can go. And we have the leadership to help you get there. At CNA, we strive to create a culture in which people know they matter and are part of something important, ensuring the abilities of all employees are used to their fullest potential.
Threat Hunter, Consulting Director is a senior-level individual contributor focused on proactively searching adversarial activity in the network with the goal of discovering threats prior to an adversary completing its mission. This role utilizes advanced skills to perform enterprise forensics including operating system artifact analysis, log analysis, network traffic analysis, and the MITRE ATT&CK framework. This position is responsible for developing innovative and creative detection tactics and techniques that protect client data and corporate assets from diverse threats. The role is a key member of a highly technical team operating in a rapidly changing environment.JOB DESCRIPTION:
Essential Duties & Responsibilities
Performs a combination of duties in accordance with departmental guidelines:
Leads and conducts real-time and historical analysis using the full security suite including Endpoint Protection, SIEM, Firewall, EDR, IDS, Email Gateway, Web Content Filtering, and Identity Management technologies.
Conducts incident response triage analysis on suspected hosts to determine potential attacks and scope.
Conducts threat hunting operations based on the latest threat intelligence.
Creates strategies for enterprise-wide hunts based on triage findings and intelligence efforts.
Maintains awareness of emerging attack tactics, techniques, and procedures.
Collaborates with SOC, Threat Intelligence, Incident Response, and Enterprise Security teams.
Identifies visibility gaps and recommends improvements.
Manages day-to-day SOC monitoring, investigations, response, and intelligence activities.
Coordinates escalation for advanced forensics and malware reverse engineering.
Communicates security incidents clearly to business and non-technical stakeholders.
May perform additional duties as assigned.
Reporting Relationship
Typically AVP or above
Skills, Knowledge & Abilities
In-depth knowledge of SIEM, IDS/IPS, web proxies, DLP, CASB, DNS security, DDoS protection, and firewalls.
Advanced experience with forensic tools for OS artifact, memory, and network analysis.
Strong understanding of malware, reverse engineering principles, and network protocols.
Demonstrated ability to build, execute, and lead enterprise threat hunting programs.
Ability to work collaboratively in high-pressure incident response environments.
Demonstrated ability to apply artificial intelligence and machine-learning techniques to threat hunting, including use of LLMs, UEBA, and statistical models to surface anomalous behavior, enrich low-signal telemetry, and accelerate hypothesis-driven hunts across large enterprise datasets.
Experience evaluating, tuning, and operationalizing AI-enabled security capabilities (e.g., AI-assisted SIEM, EDR/XDR, and detection engineering workflows), with an understanding of model limitations, bias, false-positive risk, and the need for analytically defensible outcomes suitable for executive, legal, and regulatory review.
Education & Experience
Bachelor’s degree in Computer Science or related discipline, or equivalent experience.
Typically a minimum of 10 years of experience in cyber monitoring, threat hunting, incident response, forensics, or related disciplines.
#LI-KJ1 #LI-HYBRID
In certain jurisdictions, CNA is legally required to include a reasonable estimate of the compensation for this role. In District of Columbia, California, Colorado, Connecticut, Illinois, Maryland, Massachusetts, New York and Washington, the national base pay range for this job level is $97,000 to $189,000 annually. Salary determinations are based on various factors, including but not limited to, relevant work experience, skills, certifications and location. CNA offers a comprehensive and competitive benefits package to help our employees – and their family members – achieve their physical, financial, emotional and social wellbeing goals. For a detailed look at CNA’s benefits, please visit cnabenefits.com.
CNA is committed to providing reasonable accommodations to qualified individuals with disabilities in the recruitment process. To request an accommodation, please contact leaveadministration@cna.com.
Aplyr's read
CNA Insurance is a major player in commercial insurance, attracting professionals in underwriting, claims, and risk management across various sectors.
What's promising
- •CNA Insurance offers a diverse range of roles, from underwriting to data science, appealing to a broad talent pool.
- •The company is a leader in commercial property and casualty insurance, providing stability and growth opportunities.
- •CNA's focus on specialized insurance solutions supports career development in niche markets like cyber and dental malpractice.
What to watch
- •The insurance industry faces regulatory challenges that can impact operational flexibility and innovation.
- •CNA's focus on commercial insurance may limit opportunities for those interested in personal insurance sectors.
- •Limited public information about CNA's workplace culture and employee satisfaction could be a concern for potential applicants.
Why CNA Insurance
- •CNA Insurance specializes in complex claims management, offering unique career paths in niche areas like dental malpractice.
- •The company provides specialized underwriting roles, catering to sectors like construction and non-profit management liability.
- •CNA's strategic sourcing and talent development roles highlight its commitment to internal growth and operational efficiency.
Aplyr’s read is generated by AI from public sources. Was it useful?
About CNA Insurance
CNA Financial Corporation is a leading provider of commercial property and casualty insurance products and services. The company offers a range of insurance solutions for businesses, including liability, workers' compensation, and property insurance.
