Proactive Cyber Threat Hunter

Booz Allen Hamilton; Sacramento (CA); On-site; USD 69,000 - 158,000; Full time

Job summary

Booz Allen Hamilton is seeking a Cyber Threat Hunter to develop and execute hypothesis-driven hunts, leveraging threat intel, MITRE ATT&CK, and deep telemetry analysis across endpoints, networks, and cloud. You’ll collaborate with incident responders, threat intelligence analysts, and security specialists to uncover sophisticated adversary activity.

Qualified candidates will have 3+ years in threat hunting or related fields, hands-on experience with major EDR/XDR platforms, and strong analytical

Qualifications

• 3+ years of experience in threat hunting, incident response, digital forensics, detection engineering, or advanced security analysis.
• Experience conducting proactive threat hunts across multiple EDR/XDR and SIEM platforms.
• Knowledge of MITRE ATT&CK, translating techniques into hunt hypotheses and telemetry needs.

Responsibilities

• Develop and execute proactive hypothesis-driven threat hunts based on adversary behaviors and threats.
• Translate threat intelligence into actionable hunt hypotheses and telemetry requirements.
• Pivot across multiple telemetry sources to identify anomalous or malicious activity.
• Develop reusable hunt methodologies, queries, and playbooks.
• Demonstrate proficiency with complex queries across EDR/XDR, SIEM, and analytics platforms.
• Pivot between endpoint, network, identity, cloud data to reconstruct attacker behavior.

Skills

Threat hunting

Incident response

Digital forensics

Threat intelligence

MITRE ATT&CK knowledge

Analytical thinking

Education

HS diploma or GED

Tools

SentinelOne

CrowdStrike Falcon

Palo Alto Cortex XDR

Microsoft Defender for Endpoint

Job description

Booz Allen Hamilton is seeking a Cyber Threat Hunter to develop and execute hypothesis-driven hunts, leveraging threat intel, MITRE ATT&CK, and deep telemetry analysis across endpoints, networks, and cloud. You’ll collaborate with incident responders, threat intelligence analysts, and security specialists to uncover sophisticated adversary activity.

Qualified candidates will have 3+ years in threat hunting or related fields, hands-on experience with major EDR/XDR platforms, and strong analytical