Remote Threat Hunter & Purple Team Operator TS/SCI Eligible

Openkrill; United States; Remote; USD 120.000 - 180.000; Vollzeit

Benefits dieser Stelle

Health insurance

Disability insurance

401(k) matching

Professional development

Remote-friendly

Flexible PTO

Zusammenfassung

SIXGEN is seeking a mid-level Threat Hunter / Purple Team Operator to identify threats evading detection, develop hunting hypotheses, and feed findings into detection engineering. The role blends remote threat hunting with on-site purple team coordination for red team engagements to secure systems and validate detections in real time.

Responsibilities include hypothesis-driven hunts, log analysis across endpoints, networks, and cloud, documenting findings, and briefing stakeholders. U.S.

Qualifikationen

• 3 - 5+ years of experience in threat hunting, SOC/detection engineering, incident response, or a closely related defensive security role.
• Hands-on experience with a major SIEM and EDR platform.
• Understanding of MITRE ATT&CK and mapping activity to TTPs.
• Knowledge of adversary tradecraft and red team testing methodology.
• Strong written and verbal communication for customer-facing findings.

Aufgaben

• Conduct hypothesis-driven threat hunts across endpoints, networks, and cloud telemetry before red team engagements.
• Analyze logs and databases for IOCs and TTPs mapped to MITRE ATT&CK.
• Document hunt coverage, findings, and recommendations; escalate active adversary activity.
• Deliver a threat hunt summary and verify environment clearance before assessments.
• Collaborate with blue teams to detect, tune, and validate controls in real time.
• Brief technical and non-technical stakeholders on hunt outcomes.
• Maintain confidentiality during red/blue team activity.

Jobbeschreibung

SIXGEN is seeking a mid-level Threat Hunter / Purple Team Operator to identify threats evading detection, develop hunting hypotheses, and feed findings into detection engineering. The role blends remote threat hunting with on-site purple team coordination for red team engagements to secure systems and validate detections in real time.

Responsibilities include hypothesis-driven hunts, log analysis across endpoints, networks, and cloud, documenting findings, and briefing stakeholders. U.S.