Remote Cyber Threat Hunter: Proactive Hunts

Booz Allen Hamilton; Phoenix (AZ); On-site; USD 69,000 - 158,000; Full time

Benefits offered by this job

Health benefits

Tuition assistance

Paid time off

Job summary

Booz Allen Hamilton is seeking a Cyber Threat Hunter to develop and execute hypothesis-driven hunts that identify sophisticated adversary activity beyond existing controls. You will combine threat intelligence, MITRE ATT&CK, and multi-source telemetry to uncover evidence of malicious activity.

Join a team of incident responders, forensic investigators, and threat intelligence analysts. You will build reusable hunt methodologies and playbooks, and you will move fluidly across endpoint, network,

Qualifications

• 3+ years in threat hunting, incident response, digital forensics, detection engineering, or advanced security analysis.
• Experience conducting proactive threat hunts across multiple EDR/XDR and SIEM platforms.
• Knowledge of MITRE ATT&CK and translating techniques into hunt hypotheses.
• Experience with one or more major EDR/XDR technologies such as SentinelOne, CrowdStrike Falcon, Cortex XDR, or Defender for Endpoint.
• HS diploma or GED.

Responsibilities

• Develop and execute proactive threat hunts based on adversary behaviors, threats, intelligence, and visibility gaps.
• Translate threat intelligence and attacker techniques into actionable hunt hypotheses.
• Pivot across large telemetry to identify anomalous activity and reconstruct attacker behavior.
• Use MITRE ATT&CK to map tactics to telemetry sources and findings.
• Develop reusable hunt methodologies, queries, and playbooks.
• Collaborate with incident responders and threat intel analysts throughout investigations.

Skills

Threat hunting

Incident response

Digital forensics

Threat intelligence

Query languages (KQL)

Education

HS diploma or GED

Tools

SentinelOne

CrowdStrike Falcon

Cortex XDR

Microsoft Defender for Endpoint

Job description

Booz Allen Hamilton is seeking a Cyber Threat Hunter to develop and execute hypothesis-driven hunts that identify sophisticated adversary activity beyond existing controls. You will combine threat intelligence, MITRE ATT&CK, and multi-source telemetry to uncover evidence of malicious activity.

Join a team of incident responders, forensic investigators, and threat intelligence analysts. You will build reusable hunt methodologies and playbooks, and you will move fluidly across endpoint, network,