Remote Threat Hunter & Purple Team Operator

SIXGEN; Washington (District of Columbia); Remoto; USD 110.000 - 170.000; Tempo pieno

Vantaggi offerti da questo lavoro

Remote work

Health insurance

401(k) plan

Professional development

Descrizione del lavoro

SIXGEN is hiring a mid-level Threat Hunter / Purple Team Operator to identify evasive threats, test hypotheses, and feed findings back into detection engineering. You will blend remote threat hunting with on-site purple team coordination to support red team engagements and secure systems.

The role requires translating adversary tradecraft into defensive guidance and working independently in remote client-facing environments, with US citizenship and security-clearance eligibility.

Competenze

• 3-5+ years in threat hunting, SOC/detection engineering, or related defensive security role.
• Hands-on experience with a major SIEM and EDR platform.
• Working knowledge of MITRE ATT&CK and mapping activity to adversary TTPs.
• Understanding of common adversary tradecraft and red team testing methodology.
• Strong written and verbal communication for customer-facing findings.
• Comfortable operating independently in remote, customer-facing roles.
• U.S. citizenship with eligibility to obtain and maintain a U.S. government security clearance.

Mansioni

• Conduct hypothesis-driven and intelligence-led threat hunts across endpoints, networks, and cloud telemetry for weeks before red team engagements.
• Analyze logs, alerts, and historical data for IOCs, anomalous behavior, and adversary TTPs mapped to MITRE ATT&CK from partner sources.
• Document hunt coverage/methodology, findings, and recommendations; escalate if active adversary activity is found.
• Deliver a threat hunt summary and determine if the customer environment is clear prior to red team assessments.
• Partner with blue teams during purple engagements to detect, tune, and validate controls against red team TTPs in real-time.
• Brief technical and non-technical stakeholders on hunt results and purple team outcomes.
• Serve as a Trusted Agent during red team assessments with strict confidentiality and OPS security.

Conoscenze

Threat hunting

Purple Team

MITRE ATT&CK

SIEM

EDR/XDR

Python

KQL

Strumenti

Splunk

Microsoft Defender

CrowdStrike

Zeek

Suricata

Azure AD/Entra ID

CloudTrail

Descrizione del lavoro

SIXGEN is hiring a mid-level Threat Hunter / Purple Team Operator to identify evasive threats, test hypotheses, and feed findings back into detection engineering. You will blend remote threat hunting with on-site purple team coordination to support red team engagements and secure systems.

The role requires translating adversary tradecraft into defensive guidance and working independently in remote client-facing environments, with US citizenship and security-clearance eligibility.