Teams at Booz Allen Hamilton

Conduct proactive, hypothesis-driven threat hunts across endpoint, network, identity, cloud, and security telemetry. Develop queries, correlate large datasets, map findings to MITRE ATT&CK, reconstruct attacker activity, and identify sophisticated or previously undetected compromises. Apply digital forensics and incident response practices, document findings, escalate validated incidents, and improve detection coverage through reusable methodologies and behavior-based detections.

Conduct proactive, hypothesis-driven threat hunts across endpoint, network, identity, cloud, and security telemetry. Translate threat intelligence and adversary tradecraft into hunt hypotheses, query and correlate large datasets, map findings to MITRE ATT&CK, reconstruct attacker behavior, and identify detection gaps. Apply digital forensics and incident response expertise to investigate suspicious activity, escalate validated compromises, and improve detection capabilities.

Develops, reverse engineers, tests, and maintains embedded software supporting hardware functionality and mission systems. Builds web-based systems and APIs, documents code, configures platform-specific solutions, troubleshoots operational issues, and applies programming standards. Collaborates with cybersecurity specialists to create secure software for DoD clients. Requires a bachelor's degree, at least two years of DoD software engineering experience, eligibility for TS/SCI clearance, and a qualifying certification.