Threat Hunter Lead, Flock Safety
$150-190k
+ Equity
Public safety operating system
Be an early applicant
Public safety operating system
1001+ employees
Be an early applicant
$150-190k
+ Equity
1001+ employees
Company mission
To create safer, happier communities and cities by pre-emptively fighting crime.
Role
Who you are
- As someone with over 10 years of cybersecurity experience, at least 5 of those years in the trenches focused on DFIR/Threat Hunts, you will focus on defining and maturing the Adversary Pursuit program
- Deep technical expertise in performing DFIR and adversary threat hunts, across diverse environments (corporate systems, cloud - AWS/GCP/Azure, and operational technology networks)
- Strong experience performing DFIR on Android IoT devices
- Extensive experience utilizing enterprise security tooling (SIEM, EDR, etc.) as well as developing proprietary tools/scripts to scale the team’s capabilities
- Experience utilizing sandboxing technology to aid in the analysis of suspicious binaries and scripts; hands-on reverse engineering experience a plus
- Well versed in using cyber threat intelligence to update requirements, prioritize collection sources and integrate technical TTPs to inform and prioritize hunts
- Feeling uneasy that you haven’t ticked every box? That’s okay; we’ve felt that way too. Studies have shown women and minorities are less likely to apply unless they meet all qualifications. We encourage you to break the status quo and apply to roles that would make you excited to come to work every day
What the job involves
- As the function’s analytic lead, you will direct and manage threat hunts, technical table top exercise development, and tactical threat intelligence
- You’ll identify and prioritize opportunities for improvement based on findings from these areas
- You’ll work closely with our Offensive Security team to ensure a high level of efficacy in our ability to detect threats, and assist the Security Operations team with improvements to our response capabilities
- This is a critical role that will be responsible for developing new methods to search and detect threats across a rapidly scaling, high-value public-private safety network
- You will be responsible for defining and executing hunts, determining and prioritizing visibility and detection gaps, and when necessary, assisting with response operations across thousands of deployed hardware devices, extensive cloud infrastructure, and core business applications
- You will help with the creation of technical exercises against Flock’s full technology stack (hardware, software, cloud, network) to help increase preparedness and readiness
- This role reports to the Director, Incident Response and Adversary Pursuit
- Success in this role will be measured by the development and execution of our threat hunt capabilities, ability and effectiveness to detect prioritized threats, and improved readiness to respond (through metrics such as MTTD)
- Leadership & Management:
- Mold the long-term threat hunting roadmap, including strategy, data ingestion requirements, and coverage metrics
- Provide operational oversight during threat hunts, ensuring objectives are defined, hunt methodology is established and timeframes are met
- Mentor and guide junior analysts in hunting methodologies, query optimization, and forensic analysis
- Map findings to the MITRE ATT&CK framework to identify coverage gaps and improve detection posture
- Create and tune high-fidelity detection rules (e.g., Splunk SPL, YARA, Sigma) based on hunt findings to prevent future recurrence
- Assist with the development of technical table top exercises, ensuring scenario applicability to the organization’s risk profile and align to real world cyber events
- Operational & Collaboration Skills:
- Collaborate with Cybersecurity, Engineering, and Product teams to help plan, and execute threat hunts, providing detailed findings and data backed recommendations for cybersecurity and architectural improvements
- Work closely with the Offensive Security team to help perform regular testing and validation of custom detection rules
- Serve as a Tier 3 escalation point for SOC analysts; perform deep-dive root cause analysis on complex security incidents
- The First 30 Days
- Build a deep understanding of the company’s technology stack, threat landscape, and existing security operations and response practices
- Establish strong partnerships with Engineering, Infrastructure, Product Security, and Offensive Security teams
- The First 60 Days
- Define a clear vision and strategy for Adversary Pursuit aligned to risk tolerance and business priorities to help create a cyber threat profile
- Evaluate current visibility (logs and intelligence) and detection capabilities to identify gaps and quick wins
- 90 Days & Beyond
- Build an organizational Cyber Threat Profile with prioritized threat actors and intelligence collection requirements and proactively identifying attacker TTPs
- Develop a phased roadmap to mature Adversary Pursuit capabilities, including visibility and detection gap remediations and tooling improvements as well as plans for incorporation into regular exercises
Our take
Public vehicle surveillance provides valuable insights to emergency services for the prevention of crime, but bringing information together to create leads is difficult. There's no standardised system for inter-city vehicle surveillance, and this makes it difficult for communities and law enforcement services to work together.
Flock Safety provides surveillance equipment that aims to improve the abilities of law enforcement and homeowner associations to communicate data with each other. The company focuses on vehicle surveillance, innovating on existing technology by using machine learning to categorise vehicles by color, license plate, state, and other data points.
Whilst automated surveillance equipment is used daily within federal police forces, Flock Safety builds technology systems that provide a means for smaller law enforcement agencies to quantify and share surveillance data easily. It's caught on too, with a funding round of $275 million awarded in 2025 that will be used to expand its manufacturing capabilities. lock Safety, a U.S. startup developing surveillance technology, has raised $275 million in new funding led by Andreessen Horowitz, as it invests in a manufacturing facility and expands into drone products, the company told Reuters. funding behind it, This data can then be automatically processed to help develop leads, a time-consuming process that would usually have to be completed manually.
Steph
Company Specialist at Welcome to the Jungle
Insights
40% employee growth in 12 months
Company
Funding (last 2 of 10 rounds)
Mar 2025
$275m
LATE VC
Mar 2024
$200m
SERIES G
Total funding: $857.8m
Company benefits
- 🌴Use what you need PTO: We seriously mean it, plus 11 company holidays and your birthday off!
- ⚕️Fully-paid health benefits plan for employees: including Medical, Dental, and Vision and an HSA match
- 👪Family Leave: We provide 16 weeks of 100% paid leave for primary caregivers and 12 weeks of 100% paid leave for secondary caregivers
- 🍼Fertility & Family Benefits: We have partnered with Maven, a complete digital health benefit for starting and raising a family. We will reimburse $10,000 a year for adoption, surrogacy, or infertility
- 🧠Mental Health: All employees receive an annual subscription to Headspace
- 💖Caregiver Support: We have partnered with Cariloop to provide our employees with caregiver support
- 💸Carta Tax Advisor: Employees receive 1:1 sessions with Equity Tax Advisors who can address individual grants, model tax scenarios, and answer general questions
- 💻WFH Stipend: $150 per month to cover the costs of working from home
- 📚L&D Stipend: $250 per year to use on Audible, Calm, Masterclass, Duolingo, Grammarly and so much more
- 🏠Home Office Stipend: A one-time $750 to help you create your dream office
- 🏢Coworking Space: If you’re not local to our ATL HQ, we’ll provide $250 a month to get you set up with an All Access Membership to WeWork (or a local coworking space in your area)
- 🐾Pet Insurance: We’ve partnered with Pumpkin to provide insurance for our employee’s fur babies
Company HQ
Home Park, Atlanta, GA
Leadership
Garrett Langley
(Founder & CEO)They worked in Computer Services freelance for over 6 years before joining Firethorn in 2015, and Clutch Technologies in 2014. They left their position as President of Moment LLC to found Flock Safety in April 2017.
Share this job
View 38 more jobs at Flock Safety