Remote Cyber Threat Hunter & Incident Investigator

Booz Allen Hamilton; Salt Lake City (UT); On-site; USD 69,000 - 158,000; Full time

Job summary

Booz Allen Hamilton is seeking a Cyber Threat Hunter to develop and run hypothesis-driven hunts, leveraging threat intel, MITRE ATT&CK, and cross-platform telemetry to uncover adversary activity. The role collaborates with incident responders, forensics, threat intel, and security analytics teams.

The ideal candidate has 3+ years of threat hunting/IR/forensics experience, expertise in major EDR/XDR tech, and strong analytical and communication skills.

Qualifications

• 3+ years of experience in threat hunting, incident response, digital forensics, detection engineering, or advanced security analysis.
• Experience conducting proactive threat hunts across multiple EDR/XDR and SIEM platforms.
• Knowledge of MITRE ATT&CK and translating techniques into hunt hypotheses.

Responsibilities

• Develop and execute proactive threat hunts based on adversary behaviors and intelligence.
• Translate threat intel into actionable hunt hypotheses and telemetry requirements.
• Map techniques to hunt hypotheses using MITRE ATT&CK framework.
• Correlate telemetry across endpoint, network, identity, cloud, and data sources.
• Document hypotheses, methods, findings, and conclusions clearly.

Skills

Threat hunting

Incident response

Digital forensics

EDR/XDR platforms

MITRE ATT&CK

Endpoint telemetry

Network telemetry

Data correlation

Hypothesis testing

Forensic investigations

Education

HS diploma or GED

Tools

SentinelOne

CrowdStrike Falcon

Palo Alto Cortex XDR

Microsoft Defender for Endpoint

Job description

Booz Allen Hamilton is seeking a Cyber Threat Hunter to develop and run hypothesis-driven hunts, leveraging threat intel, MITRE ATT&CK, and cross-platform telemetry to uncover adversary activity. The role collaborates with incident responders, forensics, threat intel, and security analytics teams.

The ideal candidate has 3+ years of threat hunting/IR/forensics experience, expertise in major EDR/XDR tech, and strong analytical and communication skills.