Threat Hunter: MITRE-Aligned, Proactive Defense Expert

JobDiva, Inc.; Addison (TX); Hybrid; USD 99,000 - 123,000; Full time

Benefits offered by this job

Medical, dental, vision insurance

401k program

Flexible spending or health savings

AD&D insurance

Employee assistance program

Job summary

NTT DATA's client seeks a Security Analysis Threat Hunter in Addison, TX with hybrid work. On-site 4 days a week, you will lead hypothesis-driven threat hunts, ingest threat intel, and collaborate with SOC/IR to improve detections. The role requires deep cyber security experience and strong communication for technical and executive audiences.

The position offers comprehensive benefits and a path to enhance managed security services capabilities. Local candidates only.

Qualifications

• Strong understanding of adversary tactics, techniques, and procedures (TTPs).
• Hands-on experience performing structured threat hunts in enterprise environments.
• Proficiency with SIEM query languages and endpoint telemetry analysis.
• Ability to translate threat intelligence into actionable security detections.
• Strong written and verbal communication skills for technical and executive audiences.

Responsibilities

• Conduct hypothesis-driven and tactic-based threat hunts aligned to the MITRE Telecommunication CK framework.
• Identify low-and-slow, post-compromise attacker behavior not detected through automated alerts.
• Ingest and operationalize internal and external threat intelligence into hunting hypotheses.
• Develop and execute advanced threat hunting queries across SIEM, EDR, and security analytics platforms.
• Collaborate with SOC, SIEM, and Incident Response teams to elevate confirmed threats and support containment.
• Identify telemetry gaps and work with engineering teams to improve visibility and logging.
• Feed validated hunt results into detection engineering, threat briefs, and use-case improvements.
• Participate in threat hunt working sessions, operational reviews, and customer-facing discussions as required.

Skills

Threat hunting

SIEM querying

Endpoint telemetry

Threat intel to detections

Communication skills

Education

GIAC Certified Threat Intelligence (GCTI)

GIAC Certified Incident Handler (GCIH)

CompTIA CySA+

Certified Ethical Hacker (CEH)

Tools

MITRE Telecommunication CK Navigator

DETT-CT

SIEM platforms & log analytics

EDR/XDR solutions

Job description

NTT DATA's client seeks a Security Analysis Threat Hunter in Addison, TX with hybrid work. On-site 4 days a week, you will lead hypothesis-driven threat hunts, ingest threat intel, and collaborate with SOC/IR to improve detections. The role requires deep cyber security experience and strong communication for technical and executive audiences.

The position offers comprehensive benefits and a path to enhance managed security services capabilities. Local candidates only.