Intelligence-Led Threat Hunter & Detection Expert

NTT DATA North America; Plano (TX); On-site; USD 106,575 - 177,625; Full time

Job summary

NTT DATA is seeking a Security Analysis Threat Hunter in Plano, TX, hybrid to join our team. This role focuses on hypothesis-driven, intelligence-led threat hunting aligned to MITRE ATT&CK, working with SOC, SIEM, Vulnerability Management, and Incident Response to improve detection and reduce attacker dwell time.

The position is on-site four days per week at the client site, with local candidates only. Candidates should have 10+ years in cyber security and hands-on threat hunting experience,

Qualifications

• 10+ years in Cyber Security
• Hands-on threat hunts in enterprise environments
• Proficiency with SIEM query languages
• Translate threat intelligence into actionable detections
• Strong written and verbal communication skills

Responsibilities

• Conduct hypothesis-driven threat hunts aligned to MITRE ATT&CK.
• Identify post-compromise attacker behavior not captured by automated alerts.
• Ingest internal and external threat intelligence into hunting hypotheses.
• Develop and execute advanced hunting queries across SIEM, EDR, and analytics platforms.
• Collaborate with SOC, SIEM, and Incident Response to elevate threats.
• Identify telemetry gaps and work with engineering to improve visibility and logging.
• Feed hunt results into detection engineering and use-case improvements.
• Participate in threat hunt sessions, reviews, and customer discussions.

Skills

TTPs

Threat hunting

SIEM queries

Communication

IR collaboration

Tools

SIEM platforms

EDR/XDR

MITRE ATT&CK Navigator

DETT&CT

Threat intel feeds

Job description

NTT DATA is seeking a Security Analysis Threat Hunter in Plano, TX, hybrid to join our team. This role focuses on hypothesis-driven, intelligence-led threat hunting aligned to MITRE ATT&CK, working with SOC, SIEM, Vulnerability Management, and Incident Response to improve detection and reduce attacker dwell time.

The position is on-site four days per week at the client site, with local candidates only. Candidates should have 10+ years in cyber security and hands-on threat hunting experience,