Incident Response Threat Hunter

BOOZ ALLEN HAMILTON INTERNATIONAL (U.K.) LTD; Cambridgeshire and Peterborough; Remote; GBP 50,000 - 70,000; Full time

Job summary

A leading company is seeking a Threat Hunter to join their cyber detection and response team. The role involves detecting cyber threats, collaborating with forensic analysts, and utilizing analytical skills to identify indicators of compromise. Ideal candidates will have experience with EDR platforms and a strong understanding of security principles.

Qualifications

• Experience with EDR platforms and intrusion analysis.
• Knowledge of security principles and threat landscapes.

Responsibilities

• Perform active threat hunting and assist in forensic investigations.
• Collaborate with incident response analysts.

Skills

Analytical Skills

Intrusion Analysis

Digital Forensics

Cyber Threat Intelligence

Ability to Identify Anomalous Behavior

Education

HS Diploma or GED

Tools

Carbon Black

SentinelOne

CrowdStrike

Defender for Endpoint

Job description

Remote Work

Yes

Job Number

R0219258

Location:

Cambridgeshire, GB

Share Job Via

• Facebook
• LinkedIn
• X
• Email

Incident Response Threat Hunter

The Opportunity

Are you looking for a threat hunter role, detecting cyber threats in support of active forensic investigations? Cyber threats are evolving, and when perimeter security and automated protection aren’t enough, networks can be compromised. Information may be accessed, data exfiltrated, backups wiped, and ransomware deployed, locking up entire organizations. Join our threat detection and response team to perform active threat hunting and assist organizations in recovering from cyber incidents.

We’re seeking CND and CNO specialists who can think like cyber attackers to understand how security measures are circumvented. This role offers an opportunity to utilize your analytical skills and gain endpoint detection and response experience to identify indicators of compromise. You will collaborate with incident response analysts engaged in forensic investigations.

Join us. The world can't wait.

You Have

• Experience with EDR platforms such as Carbon Black, SentinelOne, CrowdStrike, or Defender for Endpoint
• Experience with network- and host-based intrusion analysis, digital forensics, or malware handling
• Experience with hunt teams, cyber threat intelligence, incident response, or security operations teams
• Knowledge of security principles, including MITRE ATT&CK framework, threat landscapes, or attacker TTPs
• Knowledge of Microsoft Windows, UNIX, and Mac systems
• Knowledge of security tools across application, data, network, and endpoint layers
• Ability to leverage internal and external resources for researching threats, vulnerabilities, and attacker infrastructure
• Ability to identify anomalous behavior on endpoints or network communications
• HS diploma or GED

Nice If You Have

• Experience with digital forensics from a malware perspective on host or network
• Knowledge of network communications, routing protocols, regulatory standards and compliance, and common internet applications and standards
• Knowledge of native system and network policies
• Certifications such as GIAC Reverse Engineering Malware (GREM), GIAC Certified Forensic Analyst (GCFA), GIAC Network Forensics Analyst (GNFA), Offensive Security certifications like OSCP and OSCE, or related credentials

Commitment to Non-Discrimination

All qualified applicants will receive consideration for employment without regard to disability, protected veteran status, or any other protected status under applicable laws.