Proactive Cyber Threat Hunter

Booz Allen Hamilton; Seattle (WA); On-site; USD 69,000 - 158,000; Full time

Job summary

Booz Allen Hamilton is seeking a Cyber Threat Hunter to develop and execute hypothesis-driven threat hunts across endpoints, networks, and cloud environments. You will leverage MITRE ATT&CK, threat intelligence, and multiple EDR/XDR platforms to uncover sophisticated adversary activity and pivot based on emerging evidence.

You will collaborate with incident responders, forensic investigators, threat intelligence analysts, and other security specialists to translate findings into actionable

Qualifications

• 3+ years of experience in threat hunting, incident response, digital forensics, or advanced security analysis.
• Experience conducting proactive threat hunts across multiple EDR/XDR and SIEM platforms.
• Knowledge of MITRE ATT&CK and translating techniques into hunts.
• Experience with endpoint telemetry and network telemetry.
• Ability to document hypotheses, methodology, findings clearly.

Responsibilities

• Develop and execute proactive threat hunts based on behaviors and intelligence.
• Translate threat intel into actionable hunt hypotheses.
• Map tactics to telemetry sources using the MITRE ATT&CK framework.
• Query and correlate telemetry across EDR/XDR, SIEM, and security analytics.
• Identify patterns across endpoints, networks, identities, and clouds.
• Develop reusable hunt playbooks and methods.
• Escalate findings into incident response when needed.
• Collaborate with incident responders and threat intel analysts.

Skills

Threat hunting

Incident response

Digital forensics

Detection engineering

Security analysis

MITRE ATT&CK

EDR/XDR platforms

KQL

Education

HS diploma or GED

Tools

SentinelOne

CrowdStrike Falcon

Palo Alto Cortex XDR

Microsoft Defender for Endpoint

Microsoft Sentinel

Job description

Booz Allen Hamilton is seeking a Cyber Threat Hunter to develop and execute hypothesis-driven threat hunts across endpoints, networks, and cloud environments. You will leverage MITRE ATT&CK, threat intelligence, and multiple EDR/XDR platforms to uncover sophisticated adversary activity and pivot based on emerging evidence.

You will collaborate with incident responders, forensic investigators, threat intelligence analysts, and other security specialists to translate findings into actionable