Lead, Cyber Defense & Response

Prudential Financial

Confirmed live today High trust

Quick summary

Work type
On-site
Location
Newark, NJ
Employment
Full-time
Posted
82 days ago
Freshness
Confirmed live today

Market check

Salary context

How this pay compares to similar roles

Similar $169k
$112k $222k
below market most similar roles pay here above market

This listing doesn't post a salary. Most similar roles pay $143,987–$194,350.

Based on 240 similar postings.

Employer

About Prudential Financial

Prudential Financial is a global financial services leader and premier active global investment manager.

Prudential Financial currently has 44 open roles on FindRole.

Listed pay typically runs $123,700–$202,050 across 18 roles with salary data.

Most-posted roles

View all roles at Prudential Financial

At a glance

TL;DR · Lead, Cyber Defense & Response

JOB TITLE: Lead, Cyber Defense & Response The Lead, Cyber Defense & Response serves as a senior technical lead for proactive threat hunting operations across on-prem and cloud environments. Reporting to the Director of Threat Hunting, this role involves leading complex hunts from hypothesis development through operationalization while mentoring other hunters. Key responsibilities include executing advanced investigations, developing hunt hypotheses based on adversary TTPs, and translating findings into durable defensive improvements like new detections or telemetry gap remediations. The role requires proficiency in SIEM/XDR platforms, specifically using Splunk SPL and Microsoft KQL to analyze endpoint, identity, network, and application telemetry. Candidates must apply frameworks like MITRE ATT&CK and the Cyber Kill Chain to identify suspicious patterns, validate attack paths, and improve enterprise visibility and response readiness within a complex financial services environment.

What you'll do

  • Lead proactive threat hunts across on-prem and cloud environments including Azure, AWS, and M365.
  • Develop hunt hypotheses based on emerging threats, adversary TTPs, and internal incident learnings.
  • Execute advanced investigations using SIEM/XDR platforms by authoring Splunk SPL and Microsoft KQL queries.
  • Translate hunt findings into durable defensive improvements such as new detections, use-cases, and response guidance.
  • Partner with Threat Intelligence to convert raw intelligence into environment-specific hunting plans and coverage tracking.
  • Identify logging and data quality deficiencies to drive visibility and resiliency improvements across the enterprise.
  • Provide technical leadership and coaching to threat hunting staff on methodologies, documentation, and analytic approaches.
  • Support incident response by performing adjacency and scoping hunts during active security incidents.

What we're looking for

  • 5+ years of experience in cyber threat hunting, incident response, detection engineering, or security operations in large enterprise environments.
  • Demonstrated experience conducting investigations across endpoint, identity, network, and cloud telemetry in complex environments.
  • Strong proficiency with at least one major SIEM/XDR ecosystem and advanced query authoring.
  • Hands-on experience with Splunk SPL and/or Microsoft KQL (preferred).
  • Working knowledge of attacker tradecraft including credential access, persistence, lateral movement, defense evasion, C2, and data exfiltration.
  • Strong understanding of adversarial frameworks including MITRE ATT&CK and the Cyber Kill Chain.
  • Experience designing or improving hunt programs, including workflow, metrics, reporting, and knowledge management.
  • One or more industry standard certifications such as GIAC, Microsoft SC-200, AZ-500, or CompTIA CySA+ (preferred).

More like this

Similar roles

Lead Detection Engineer, Cyber Defense & Response

Prudential Financial

Newark, NJ 36 days ago
Splunk Enterprise Security SPL KQL Python SOAR CI/CD MITRE ATT&CK Cyber Kill Chain Incident Response Threat Hunting Cyber Threat Intelligence Digital Forensics Windows Linux macOS Security Automation Telemetry Pipelines

Lead, Insider Risk - Cyber Defense & Response

Prudential Financial

Newark, NJ 105 days ago
Digital Forensics SIEM Behavioral Analytics User Activity Monitoring Threat Intelligence Data Integration Cyber Threat Intelligence Forensic Analysis Software CISSP GCFA GCFR GCTI CITPM

Cyber Defense & Executive Engagement Lead

Salesforce

McLean, VA +1 13 days ago $172,500–$260,100
Cyber Threat Intelligence MITRE ATT&CK AWS Azure GCP Machine Learning Splunk ElasticSearch Jupyter Notebooks Reverse Engineering Malware Analysis SaaS Incident Response Security Engineering Platform Defense Threat Intelligence Platforms TTPs
8+ yrs exp Hybrid

Lead Threat Hunter

Allstate

Remote (IL) 3 days ago $120,000–$175,000
Threat Hunting MITRE ATT&CK SIEM EDR XDR Python PowerShell Go Bash AWS Azure M365 Splunk Sentinel Elastic CrowdStrike Defender SentinelOne Tanium KQL SPL Sigma YARA Snort Suricata SOAR TCP/IP DNS TLS HTTP SMTP Kubernetes AI LLM RAG Atomic Red Team CALDERA Stratus Red Team Diamond Model Pyramid of Pain Kill Chain MITRE ATLAS OWASP Top 10 for LLM Applications
7+ yrs exp Remote