Remote Threat Hunter: Proactive Security & IR (Contract)

Covenant HR LLC; United States; Remote; USD 124,000 - 207,000; Part time

Job summary

Our client in the United States is seeking an experienced Threat Hunter for a 1–2 month contract. This remote role requires hands-on threat hunting across endpoints, networks, identities, and cloud environments, with emphasis on MITRE ATT&CK and advanced analytics.

Responsibilities include intelligence-driven hunts, hypothesis-based investigations, and collaboration with incident response teams to escalate significant findings.

Qualifications

• 3+ years of cybersecurity threat hunting experience.
• Experience investigating adversary activity beyond SOC alerts.
• Proficient with EDR/XDR and SIEM tools and querying.

Responsibilities

• Conduct proactive intelligence-driven threat hunts to identify adversary activity that evades controls.
• Develop and execute hypothesis-based investigations using threat intel and MITRE ATT&CK.
• Analyze large telemetry datasets to uncover suspicious activity and potential compromises.
• Investigate advanced attack techniques including ransomware, credential theft, lateral movement, and data exfiltration.
• Collaborate with incident responders and threat intelligence analysts to validate and escalate findings.
• Reconstruct attacker activity, establish timelines, and document evidence and conclusions.
• Develop reusable hunting queries, playbooks, and recommendations to improve detection.

Skills

Threat hunting

MITRE ATT&CK

Cybersecurity experience

Hypothesis-driven investigations

Escalation of threats

Tools

CrowdStrike Falcon

SentinelOne

Microsoft Defender for Endpoint

Palo Alto Cortex XDR

Microsoft Sentinel

KQL

Python

PowerShell

Job description

Our client in the United States is seeking an experienced Threat Hunter for a 1–2 month contract. This remote role requires hands-on threat hunting across endpoints, networks, identities, and cloud environments, with emphasis on MITRE ATT&CK and advanced analytics.

Responsibilities include intelligence-driven hunts, hypothesis-based investigations, and collaboration with incident response teams to escalate significant findings.