Threat Hunter: Hypothesis-Driven Cyber Defense

VulnU; McLean (VA); On-site; USD 69,000 - 158,000; Full time

Benefits offered by this job

Learning budget

Job summary

Booz Allen Hamilton seeks a Cyber Threat Hunter to develop and execute hypothesis-driven hunts identifying adversary activity across endpoints, networks, cloud, and identity. You will leverage MITRE ATT&CK and threat intelligence and work with incident responders, forensic investigators, and threat intelligence analysts.

Minimum 3 years in threat hunting/IR/digital forensics, experience with multiple EDR/XDR and SIEM platforms, and the ability to translate intelligence into hunt hypotheses are

Qualifications

• 3 years of experience in threat hunting, incident response, digital forensics, or related field.
• Experience performing proactive threat hunts across multiple EDR/XDR and SIEM platforms.
• Familiarity with MITRE ATT&CK and translating techniques into hunt hypotheses.

Responsibilities

• Develop and execute hypothesis-driven threat hunts using MITRE ATT&CK.
• Translate threat intelligence into actionable hunt hypotheses.
• Query and correlate telemetry across endpoints, networks, identities, cloud, and data sources.
• Document hypotheses, methodology, findings, and conclusions clearly.
• Collaborate with incident responders, forensic investigators, and threat intel teams.

Skills

Threat hunting

Incident response

Digital forensics

Detection engineering

Security analysis

MITRE ATT&CK knowledge

Telemetry analysis

Querying telemetry

Education

High school diploma or GED

Tools

SentinelOne

CrowdStrike Falcon

Cortex XDR

Microsoft Defender for Endpoint

Job description

Booz Allen Hamilton seeks a Cyber Threat Hunter to develop and execute hypothesis-driven hunts identifying adversary activity across endpoints, networks, cloud, and identity. You will leverage MITRE ATT&CK and threat intelligence and work with incident responders, forensic investigators, and threat intelligence analysts.

Minimum 3 years in threat hunting/IR/digital forensics, experience with multiple EDR/XDR and SIEM platforms, and the ability to translate intelligence into hunt hypotheses are