Remote Cyber Threat Hunter - Hypothesis-Driven Investigations

Booz Allen Hamilton; San Francisco (CA); Hybride; USD 69 000 - 158 000; Plein temps

Résumé du poste

Booz Allen Hamilton seeks a Cyber Threat Hunter to design hypothesis-driven hunts and uncover sophisticated adversary activity across endpoints, networks, and cloud environments. You will combine threat intelligence, MITRE ATT&CK, and deep telemetry analysis to reveal evidence of malicious behavior.

In collaboration with incident responders, forensic investigators, and threat intelligence analysts, you will develop and test hypotheses, create reusable hunt methods, and translate findings into

Qualifications

• 3+ years in threat hunting, incident response, digital forensics, detection engineering, or advanced security analysis
• Experience conducting proactive threat hunts across multiple EDR/XDR and SIEM platforms
• Knowledge of MITRE ATT&CK and translating techniques into hunt hypotheses
• Ability to correlate telemetry across endpoint, network, identity, cloud, and data sources

Responsabilités

• Develop and execute proactive threat hunts based on adversary behaviors
• Translate intelligence, tradecraft, and attacker techniques into hunt hypotheses
• Map tactics and techniques to telemetry sources and findings
• Use large-scale telemetry to identify anomalous or malicious activity
• Develop reusable hunt methodologies, queries, and playbooks
• Pivot across data sources to reconstruct attacker behavior
• Escalate validated findings into incident response processes

Connaissances

Threat hunting

Incident response

Digital forensics

Threat intelligence

MITRE ATT&CK

EDR/XDR/SIEM

Formation

HS diploma or GED

Outils

SentinelOne

CrowdStrike Falcon

Cortex XDR

Defender for Endpoint

Description du poste

Booz Allen Hamilton seeks a Cyber Threat Hunter to design hypothesis-driven hunts and uncover sophisticated adversary activity across endpoints, networks, and cloud environments. You will combine threat intelligence, MITRE ATT&CK, and deep telemetry analysis to reveal evidence of malicious behavior.

In collaboration with incident responders, forensic investigators, and threat intelligence analysts, you will develop and test hypotheses, create reusable hunt methods, and translate findings into