Midcontinent Independent System Operator (MISO) · 18 hours ago
Threat Researcher
Midcontinent Independent System Operator (MISO) is a regional transmission organization ensuring reliable power flow to 45 million Americans. As a Threat Researcher, you will identify and mitigate threats, conduct investigations into security incidents, and enhance MISO's cyber defense posture.
Electrical DistributionEnergyNon Profit
Responsibilities
Perform threat hunting and investigation efforts by conducting host and network forensics, log analysis, and malware triage to identify attacker behavior and emerging risks
Analyze and correlate large volumes of security telemetry and threat intelligence, using analytical techniques to uncover anomalies and develop high-fidelity detections
Design, implement, and continuously improve layered detection and defense capabilities by integrating multiple log sources into unified data models and correlation strategies
Perform independent research on adversary tactics, techniques, and procedures (TTPs), translating findings from incident investigations and attack path testing into actionable detection and engineering requirements
Collaborate closely with SOC, Incident Response, and other teams to operationalize security research, support 24x7 on-call operations, and strengthen MISO’s overall cyber defense posture
Qualification
Required
At least 4+ years relevant work experience in Cyber Security and a data science/analytics background
Bachelor's degree in Computer Science, Applied Mathematics, Statistics, Data Science, Security
Proficiency in threat detection tools (e.g., SIEM, EDR, NDR) and familiarity with threat hunting methodologies
Proficiency with security automation and orchestration (SOAR), threat intelligence platforms, and incident response workflows, including scripting and programming in PowerShell, Python, or Bash, working with APIs and version control (Git), processing large data sets using Power BI and ServiceNow
Knowledge of Microsoft Azure and Entra ID ecosystems including logs, and security products
Preferred
ServiceNow experience is a plus
GPEN – GIAC Penetration Tester
GCTI – GIAC Cyber Threat Intelligence
Benefits
401k
Vacation
Sick and safe time
Company
Midcontinent Independent System Operator (MISO)
MISO is the electric grid operator for the central United States.
H1B Sponsorship
Midcontinent Independent System Operator (MISO) has a track record of offering H1B sponsorships. Please note that this does not
guarantee sponsorship for this specific role. Below presents additional info for your
reference. (Data Powered by US Department of Labor)
Distribution of Different Job Fields Receiving Sponsorship
Represents job field similar to this job
Trends of Total Sponsorships
2025 (6)
2024 (7)
2023 (17)
2022 (9)
2021 (4)
2020 (10)
Funding
Current Stage
Late StageLeadership Team
Recent News
MarketScreener
2025-10-30
U.S. Department of Energy
2025-09-30
Company data provided by crunchbase