Cyber Threat Hunter, Mid

Booz Allen Hamilton

Confirmed live today High trust

Quick summary

Work type: On-site
Location: Bethesda, MD
Employment: Full-time
Posted: 55 days ago
Freshness: Confirmed live today
Nearby: 99+ roles within 25 mi

Market check

Salary context

How this pay compares to similar roles

Similar $153k

$97k $206k

below market most similar roles pay here above market

This listing doesn't post a salary. Most similar roles pay $122,275–$184,325.

Based on 240 similar postings.

Employer

About Booz Allen Hamilton

Booz Allen Hamilton is a management and technology consulting firm that provides analytics, digital, engineering, and cybersecurity solutions primarily to U.S. government agencies and commercial clients. Industry: Management & Technology Consulting

Booz Allen Hamilton currently has 1662 open roles on FindRole.

Listed pay typically runs $86,800–$198,000 across 904 roles with salary data.

Most-posted roles

View all roles at Booz Allen Hamilton

At a glance

TL;DR · Cyber Threat Hunter, Mid

Role Posting Log in to save

The Cyber Threat Hunter, Mid supports a Cybersecurity Operations Division by proactively identifying malicious activity and uncovering hidden threats to strengthen the organization’s defensive posture. This role involves conducting hypothesis-driven hunts across enterprise networks using threat intelligence, adversary TTPs, and behavioral analytics to detect early indicators of compromise. The hunter performs deep-dive analysis of logs, endpoint telemetry, and network data to validate findings, develop new analytics, and identify visibility gaps. Key responsibilities include documenting repeatable workflows, producing high-quality hunt reports, and collaborating with SOC, IR, CTI, and platform engineering teams. Required skills include experience with MITRE ATT&CK, Splunk PEAK, and forensic triage. Candidates should possess experience with Splunk Enterprise, SPL queries, behavioral analytics, and statistical or machine learning-based hunting techniques to support insider threat programs and CI investigations.

Skills

MITRE ATT&CK Splunk Enterprise SPL Behavioral Analytics Log Analysis Forensic Triage Threat Intelligence Anomaly Detection Machine Learning SOC IR CTI

What you'll do

Conduct hypothesis-driven hunts across enterprise networks to identify malicious activity and hidden threats.
Perform deep-dive analysis of logs, endpoint telemetry, and network data to validate findings.
Develop new analytics and refine existing logic to improve organizational detection capabilities.
Escalate confirmed threats to SOC and incident response teams for immediate action.
Document repeatable workflows, SOPs, and high-quality hunt reports for stakeholders.
Brief leadership on emerging threats, hunt outcomes, and recommended defensive improvements.
Translate hunt findings into actionable detection enhancements and updated playbooks.
Integrate new data sources and operationalize threat intelligence with engineering teams.

What we're looking for

2+ years of experience analyzing adversary behaviors, developing hunt hypotheses, and executing structured, hypothesis-driven hunt operations.
Experience conducting hunts aligned to MITRE ATT&CK and frameworks such as Splunk PEAK.
Experience leveraging threat intelligence and emerging adversary TTPs to develop hunt hypotheses.
Experience performing advanced analytics, log analysis, and forensic triage to support CI and insider threat investigations.
Experience maintaining documentation, including SOPs, analytic development notes, deployment records, and review cycles.
Ability to translate hunt findings into actionable improvements such as detection enhancements and updated playbooks.
Ability to obtain and maintain a Public Trust or Suitability/Fitness determination.
Bachelor’s degree.

Similar roles

Cyber Threat Hunter

General Dynamics

Falls Church, VA 49 days ago $114,750–$155,250

Cyber Threat Hunting MITRE ATT&CK Splunk Elastic Cyber Security Architecture Threat Detection ITIL Logging and Analytics Information Assurance Agile

6+ yrs exp

Save

Cyber Threat Hunter

Booz Allen Hamilton

McLean, VA 7 days ago $69,400–$158,000

MITRE ATT&CK EDR XDR SIEM KQL Python PowerShell Microsoft Sentinel CrowdStrike Falcon SentinelOne Palo Alto Cortex XDR Microsoft Defender for Endpoint Digital Forensics Incident Response Threat Intelligence Network Telemetry Endpoint Telemetry

3+ yrs exp

Save

Cyber Threat Hunter

Booz Allen Hamilton

McLean, VA 7 days ago $69,400–$158,000

Threat Hunting MITRE ATT&CK EDR XDR SIEM KQL Python PowerShell Digital Forensics Incident Response SentinelOne CrowdStrike Falcon Palo Alto Cortex XDR Microsoft Defender for Endpoint Microsoft Sentinel Cyber Threat Intelligence

3+ yrs exp

Save

Senior Threat Hunter

Leidos

Sierra Vista, AZ 63 days ago $107,900–$195,050

Threat Hunting Incident Response Detection Engineering AWS Microsoft Azure Google Cloud Platform Oracle Cloud SaaS Machine Learning AI Network Analysis TTPs Security+ CEH GCIH

8+ yrs exp Hybrid

Save

Cyber Threat Intelligence Analyst

Booz Allen Hamilton

Huntsville, AL 47 days ago

Splunk Sentinel Python SQL PHP C++ Perl Java CrowdStrike Mandiant VirusTotal Shodan QRadar ArcSight Defender SIEM Digital Forensics Penetration Testing Network Protocols

5+ yrs exp

Save

Cyber Threat Intelligence Analyst

Booz Allen Hamilton

Huntsville, AL 24 days ago

Splunk Sentinel Python SQL C++ PHP Perl Java CrowdStrike Mandiant VirusTotal Shodan QRadar ArcSight Defender SIEM Digital Forensics Penetration Testing Network Protocols

3+ yrs exp

Save