Mid-Level Threat Hunter / Purple Team Operator (Fully Remote)

SixGen; United States; Hybrid; USD 110,000 - 150,000; Full time

Benefits offered by this job

Employer-paid medical, dental, vision,

disability, and life insurance

401(k) with 4% employer contribution

Flexible PTO

Remote-work policies

Job summary

SIXGEN is seeking a mid-level Threat Hunter / Purple Team Operator to identify threats that evade existing detection methods across endpoints, networks, and cloud telemetry.

The role combines remote threat hunting and on-site purple team coordination for red team engagements, requiring US citizenship and eligibility for government security clearance. You will work with blue teams to tune controls, validate detections, and improve threat visibility across the enterprise.

Qualifications

• 3–5+ years in threat hunting, SOC/detection engineering, or incident response.
• Hands-on experience with major SIEM and EDR platforms.
• Experience with MITRE ATT&CK framework.
• U.S. citizenship and eligibility for government security clearance.

Responsibilities

• Conduct hypothesis-driven threat hunts across endpoints, networks, and cloud telemetry.
• Analyze logs and alerts for IOCs and adversary TTPs mapped to MITRE ATT&CK.
• Partner with blue teams to detect, tune, and validate controls against red team TTPs.

Skills

Threat hunting

SOC/detection engineering

Incident response

MITRE ATT&CK

Tools

SIEM platforms

EDR platforms

Job description

• SIXGEN is seeking a mid-level Threat Hunter / Purple Team Operator to identify threats that evade existing detection methods.
• This role combines remote threat hunting and on-site purple team coordination in support of red team engagements.

Key Responsibilities:

• Conduct hypothesis-driven threat hunts across endpoints, networks, and cloud telemetry.
• Analyze logs and alerts for IOCs and adversary TTPs mapped to MITRE ATT&CK.
• Partner with blue teams to detect, tune, and validate controls against red team TTPs.

What You Bring:

• 3–5+ years in threat hunting, SOC/detection engineering, or incident response.
• Hands-on experience with major SIEM and EDR platforms, plus MITRE ATT&CK knowledge.
• U.S. citizenship and eligibility for a government security clearance.
• Competitive compensation based on experience and clearance status.
• Employer-paid medical, dental, vision, disability, and life insurance.
• 401(k) with 4% employer contribution, flexible PTO, and remote-work policies.

SixGen

SIXGEN delivers agile, mission-ready cybersecurity solutions for government and critical infrastructure organizations. We combine deep expertise with innovative technical capabilities, fostering a diverse and inclusive culture with flexible remote work.