Threat Hunter Minerva Cyber Technologies SMARTER CYBER

Minerva Cyber Tech; Columbia (MD); On-site; USD 110,000 - 160,000; Full time

Job summary

Minerva Cyber Technologies is seeking a Threat Hunter to investigate suspicious behavior and proactively test threat hunting hypotheses across security data. You will follow evidence, document your reasoning, and help teams improve visibility and threat detection.

You will translate threat intelligence and observed anomalies into scoped investigative questions, query and correlate telemetry across endpoints, identities, networks, applications and cloud services, reconstruct activity, validate

Qualifications

• Hands-on threat hunting, security monitoring, or incident investigations.
• Ability to write analytical queries and interpret system and network behavior.
• Understanding of adversary techniques and MITRE ATT&CK fundamentals.
• Clear documentation and scripting or automation for repeatable analysis.
• Ability to travel to client sites as needed.

Responsibilities

• Translate threat intelligence and observed anomalies into scoped investigative questions.
• Query and correlate endpoint, identity, network, application, and cloud telemetry.
• Reconstruct activity, validate leads, and document alternative explanations and evidence gaps.
• Escalate findings and work with incident responders on incident scoping.
• Recommend new detections, data sources, and repeatable analytical procedures.

Skills

Threat hunting

Security monitoring

Incident investigations

Query writing

MITRE ATT&CK knowledge

Scripting/Automation

Client-site travel

Tools

EDR

SIEM

Cloud logs

Network traffic analysis

Detection content development

Job description

Threat Hunter

Minerva Cyber Technologies is seeking a Threat Hunter to investigate suspicious behavior and proactively test threat hunting hypotheses across security data. You will follow evidence, document your reasoning, and help teams improve visibility and threat detection.

What You Will Do

• Translate threat intelligence and observed anomalies into scoped investigative questions.
• Query and correlate endpoint, identity, network, application, and cloud telemetry.
• Reconstruct activity, validate leads, and document alternative explanations and evidence gaps.
• Escalate supported findings and work with incident responders on incident scoping.
• Recommend new detections, data sources, and repeatable analytical procedures.

Required Qualifications

• Hands-on experience in threat hunting, advanced security monitoring, or incident investigations.
• Ability to write analytical queries and interpret system and network behavior.
• Understanding of common adversary techniques, such as those in the MITRE ATT&CK framework, and relevant operating system fundamentals.
• Clear documentation and scripting or automation skills for repeatable analysis.
• Ability to travel to client sites as needed.

Preferred Qualifications

• Experience with EDR, SIEM, cloud logs, network traffic analysis, or detection content development.
• Relevant threat hunting or incident response certifications, or demonstrable investigation experience.

Why Join Minerva

• Work on meaningful missions tied to critical infrastructure resilience and cybersecurity.
• Join a team with deep hands-on cyber and national security experience.
• Help build and shape Minerva’s growing OT and critical infrastructure practice.
• Contribute to practical, outcomes-driven work rather than checkbox consulting.