Threat Hunter

Build the Future with AspenView Technology Partners

At AspenView, we are passionate about transforming the way organizations approach technology. We specialize in creating high-performing, nearshore IT teams to help North American clients innovate faster and more efficiently.

As we continue to grow, we’re looking for exceptional people to join our team and help drive impactful change across industries.

Why Join AspenView?

At AspenView, we’re more than a nearshore IT partner—we’re a people-first, purpose-driven company that believes great culture drives great outcomes. We’re passionate about connecting talent and technology to deliver measurable value for clients—and meaningful career paths for our people.

Here’s what you can expect:

• Competitive base
• Flexible work model: hybrid, remote, or in-office
• Real growth opportunities and leadership visibility
• Inclusive, respectful culture that blends U.S. innovation with Colombian heart
• A company that listens, invests in you, and celebrates wins together

We are seeking a Senior Threat Hunter to join the security operations team of a large US consumer lender in the financial services sector, working on-site from AspenView's secure suite in Bogotá, Medellín or Buenos Aires. You'll design and run hypothesis-driven hunts across endpoint, identity, network, email and AWS telemetry in Elastic, reporting to the on-site Threat Hunting Lead and working closely with Detection Engineering so that every good hunt ends as a working detection. This is a hands-on role for someone who can take raw intelligence and turn it into a hunt without being told how, and who knows what living-off-the-land, credential abuse and lateral movement look like in real logs, not just someone who has triaged alerts from a queue.

What you will do:

Hunt Design & Threat Intelligence

• Build hunts from threat intelligence relevant to US consumer finance, recent incidents and known telemetry gaps
• Turn raw intelligence into testable hypotheses on your own
• Decide which data sources and timeframes will answer each hunt question
• Map attacker tradecraft to MITRE ATT&CK to shape and prioritize hunts

Hunt Execution & Investigation

• Run scheduled and ad hoc hunts across CrowdStrike, Defender, Okta, Palo Alto, Proofpoint and AWS data in Elastic
• Pivot quickly when an initial query surfaces something worth chasing
• Separate real findings from noise
• Escalate live attacker activity to Tier 3 and the Incident Response Lead with the evidence attached