Threat Hunter: MITRE‑Driven Security Analyst

NTT Data Americas, Inc.; Addison (TX); On-site; USD 148,000 - 184,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

FSA/HSA

AD&D insurance

Employee assistance

401k program

Additional benefits

Job summary

NTT DATA's client in Addison, TX is seeking a Security Analysis Threat Hunter to join the team in a hybrid on-site role. You will lead hypothesis-driven threat hunts aligned to MITRE TelecommunicationCK, work with SOC, SIEM, and incident response teams, and improve detection coverage and defender visibility.

This four-days-a-week on-site position requires strong experience in cyber security, threat hunting, and translating intelligence into actionable detections. Local candidates only.

Qualifications

• Strong understanding of adversary tactics, techniques, and procedures (TTPs).
• Hands-on experience performing structured threat hunts in enterprise environments.
• Proficiency with SIEM query languages and endpoint telemetry analysis.
• Ability to translate threat intelligence into actionable security detections.
• Strong written and verbal communication skills for technical and executive audiences.

Responsibilities

• Conduct hypothesis-driven and tactic-based threat hunts aligned to the MITRE TelecommunicationCK framework.
• Identify low-and-slow, post-compromise attacker behavior not detected through automated alerts.
• Ingest and operationalize internal and external threat intelligence into hunting hypotheses.
• Develop and execute advanced threat hunting queries across SIEM, EDR, and security analytics platforms.
• Collaborate with SOC, SIEM, and Incident Response teams to elevate confirmed threats and support containment.
• Identify telemetry gaps and work with engineering teams to improve visibility and logging.
• Feed validated hunt results into detection engineering, threat briefs, and use-case improvements.
• Participate in threat hunt working sessions, operational reviews, and customer-facing discussions as required.

Skills

Adversary TTPs

Threat hunting

SIEM queries

Threat intel to detections

Communication

Education

GIAC Certified Threat Intelligence (GCTI)

GIAC Certified Incident Handler (GCIH)

CompTIA CySA+ CEH

Tools

MITRE TelecommunicationCK

DETT/CT

SIEM platforms

EDR/XDR solutions

Hunting notebooks

Automation frameworks

Threat intel feeds

Job description

NTT DATA's client in Addison, TX is seeking a Security Analysis Threat Hunter to join the team in a hybrid on-site role. You will lead hypothesis-driven threat hunts aligned to MITRE TelecommunicationCK, work with SOC, SIEM, and incident response teams, and improve detection coverage and defender visibility.

This four-days-a-week on-site position requires strong experience in cyber security, threat hunting, and translating intelligence into actionable detections. Local candidates only.