SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 140,000 - 175,000 / annual
Flock Safety is seeking a Senior Adversary Pursuit Engineer to lead proactive threat hunting and advanced detection engineering across their safety network infrastructure. This role focuses on identifying complex cybersecurity threats, designing targeted adversary pursuit campaigns, and optimizing threat visibility across cloud platforms, IoT hardware systems, and corporate applications.
Key responsibilities include leading end-to-end threat hunting campaigns to detect advanced persistent threats and visibility gaps; partnering with the Offensive Security team to validate custom detection rules and translate findings into high-fidelity detections mapped to the MITRE ATT&CK framework; designing and executing technical exercise scenarios and tabletop exercises to test incident response readiness; serving as a technical escalation point for deep-dive root cause analysis on complex incidents; and mentoring junior engineers to elevate team technical capabilities.
You will integrate security automation platforms and intelligent workflows to streamline threat analysis and accelerate operational response. This is a hands-on technical role that combines proactive threat hunting, deep adversary pursuit, and advanced detection engineering—not a routine SOC analyst position or purely offensive red-teaming role.
Required qualifications include demonstrated experience in digital forensics, incident response, and threat hunting across cloud platforms, enterprise infrastructure, and operational or IoT environments. You should have hands-on expertise with enterprise security tooling, custom script development, and authoring high-fidelity detection rules in Splunk SPL, YARA, or Sigma. Practical capability in security automation integrations, malware analysis, or sandboxing technologies is essential. Strong cross-functional technical communication skills and deep understanding of cyber threat intelligence frameworks and MITRE ATT&CK mapping are required.
