Proactive Cyber Threat Hunter & Detection Expert

Booz Allen Hamilton; Denver (CO); Remote; USD 69,000 - 158,000; Full time

Job summary

Booz Allen Hamilton is seeking a Cyber Threat Hunter to develop and execute hypothesis-driven threat hunts that uncover sophisticated adversary activity across endpoints, networks, cloud, and identity data. You will leverage threat intelligence, the MITRE ATT&CK framework, and deep telemetry analysis to identify elusive behavior and gaps in visibility.

You will work closely with incident responders, forensic investigators, threat intelligence analysts, and other security specialists, translating

Qualifications

• 3+ years of experience in threat hunting, incident response, digital forensics, detection engineering, or advanced security analysis.
• Experience conducting proactive threat hunts across multiple EDR/XDR and SIEM platforms.
• Knowledge of MITRE ATT&CK and translating techniques into hunt hypotheses.

Responsibilities

• Develop and execute hypothesis-driven threat hunts based on adversary behaviors and emerging threats.
• Translate threat intelligence and attacker techniques into actionable hunt hypotheses.
• Move beyond IOs to hunt for behaviors, patterns, and relationships across telemetry sources.
• Map tactics to telemetry sources using MITRE ATT&CK framework and identify coverage gaps.
• Identify patterns across endpoints, networks, identities, and cloud environments to reconstruct attacker behavior.
• Develop and maintain reusable hunt methodologies, queries, and playbooks.
• Query and pivot across large-scale telemetry to detect anomalous activity.
• Collaborate with incident responders, forensics, and threat intelligence to escalate findings.

Skills

Threat hunting

Incident response

Digital forensics

Detection engineering

Advanced security analysis

Education

HS diploma or GED

Tools

SentinelOne

CrowdStrike Falcon

Palo Alto Cortex XDR

Microsoft Defender for Endpoint

Job description

Booz Allen Hamilton is seeking a Cyber Threat Hunter to develop and execute hypothesis-driven threat hunts that uncover sophisticated adversary activity across endpoints, networks, cloud, and identity data. You will leverage threat intelligence, the MITRE ATT&CK framework, and deep telemetry analysis to identify elusive behavior and gaps in visibility.

You will work closely with incident responders, forensic investigators, threat intelligence analysts, and other security specialists, translating