Proactive Cyber Threat Hunter

Booz Allen Hamilton; Portland (OR); On-site; USD 69,000 - 158,000; Full time

Job summary

Booz Allen Hamilton is seeking a Cyber Threat Hunter to develop and execute hypothesis-driven hunts that uncover adversary activity across endpoint, network, cloud, and identity telemetry. The role requires moving beyond alerts to identify sophisticated behaviors using multi-source data and MITRE ATT&CK mapping.

You will work with incident responders, forensic investigators, threat intelligence analysts, and other security experts to test hypotheses and refine detection opportunities in a

Qualifications

• 3+ years of experience in threat hunting, incident response, digital forensics, detection engineering, or advanced security analysis field, including threat hunting responsibilities.
• Experience conducting proactive threat hunts across multiple EDR/XDR and SIEM platforms.
• Knowledge of MITRE ATT&CK and translating adversary techniques into hunt hypotheses.
• Knowledge of endpoint telemetry, network telemetry, and cloud telemetry.
• Ability to correlate activity across endpoint, network, identity, cloud, and data sources to reconstruct adversary behavior.
• Strong documentation of hypotheses, methodology, findings, evidence, and conclusions.

Responsibilities

• Develop and execute proactive hypothesis-driven threat hunts based on adversary behaviors and identified gaps.
• Translate threat intelligence and attacker techniques into actionable hunt hypotheses.
• Move beyond IOCs to hunt for behaviors and patterns across multiple telemetry sources.
• Map adversary tactics to hunt hypotheses using MITRE ATT&CK framework.
• Develop reusable hunt methodologies, queries, and playbooks.
• Query and pivot across large-scale telemetry to identify anomalous activity.

Skills

Threat hunting

Incident response

Digital forensics

Threat intelligence

MITRE ATT&CK

Security analytics

Education

HS diploma or GED

Tools

SentinelOne

CrowdStrike Falcon

Palo Alto Cortex XDR

Microsoft Defender for Endpoint

Job description

Booz Allen Hamilton is seeking a Cyber Threat Hunter to develop and execute hypothesis-driven hunts that uncover adversary activity across endpoint, network, cloud, and identity telemetry. The role requires moving beyond alerts to identify sophisticated behaviors using multi-source data and MITRE ATT&CK mapping.

You will work with incident responders, forensic investigators, threat intelligence analysts, and other security experts to test hypotheses and refine detection opportunities in a