Cyber Fusion Center Threat Hunting Lead

About the role

We are looking for a senior, hands‑on Threat Hunting Lead to build and mature proactive threat hunting capabilities for Mizuho’s global cybersecurity operations. As a core member of the Cyber Fusion Center you will work closely with Threat Intelligence, DFIR, Detection Engineering and other security teams to improve detection effectiveness and reduce cyber risk.

Key responsibilities

• Define and lead the enterprise threat hunting program, including strategy, methodology, governance, metrics and roadmaps.
• Conduct intelligence‑led, hypothesis‑driven hunts across endpoint, identity, cloud, network, application and email environments.
• Investigate adversary behavior, attack techniques and emerging threats using threat intelligence, behavioral analytics and contextual data.
• Support incident response and DFIR investigations with attack‑path analysis, threat validation and remediation recommendations.
• Translate hunt findings into production‑ready detections, ATT&CK‑aligned analytics, investigation procedures and automated response workflows.
• Identify gaps in visibility, telemetry and controls and partner with technology teams to close them.
• Provide technical leadership, mentoring, executive reporting and strategic recommendations to raise cyber‑defense maturity.

Required profile

• 12‑15 years of experience in threat hunting, security operations, DFIR, incident response, detection engineering or related cyber‑defense disciplines.
• Proven track record of building or leading enterprise‑scale threat hunting programs.
• Deep knowledge of adversary tradecraft, MITRE ATT&CK and hunt‑to‑detection methodologies.
• Strong investigative experience across endpoint, cloud, network, identity, application and email security events.

Required skills

• Threat Hunting
• Digital Forensics & Incident Response (DFIR)
• Incident Response
• Detection Engineering
• Threat Intelligence
• MITRE ATT&CK framework
• Endpoint, Cloud, Network, Identity, Application and Email security analysis
• Behavioral analytics and telemetry analysis
• Automated response workflow development
• Attack‑path analysis