[Hiring] Signals and Defense Engineer @Booz Allen Hamilton

Role Description

As a Security Operations and Threat Hunt Analyst, you will investigate security events and incidents while proactively searching for malicious activity that may not have been identified through existing security controls. This position combines traditional incident response responsibilities with hypothesis-driven threat hunting designed to identify adversary behaviors, uncover detection gaps, and improve overall security visibility.

The ideal candidate is a technically capable cybersecurity professional who can independently conduct investigations while collaborating with senior analysts, threat hunters, detection engineers, and incident responders during complex events. Due to the nature of work performed within this facility, U.S. citizenship is required.

What You’ll Work On

• Investigate security alerts, suspicious activity, and potential cybersecurity incidents across various environments.
• Perform incident triage and determine the scope, severity, impact, and potential root cause of identified security events.
• Support containment, eradication, and recovery activities during cybersecurity incidents.
• Conduct proactive threat hunts using threat intelligence and emerging attack techniques.
• Develop and execute threat hunting hypotheses aligned to adversary tactics using frameworks such as MITRE ATT&CK.
• Analyze large volumes of security telemetry to identify patterns and indicators of compromise.
• Use SIEM, EDR/XDR, and other platforms to support investigations and hunting activities.
• Assist with cloud-based hunting and investigations across environments such as AWS, Azure, and GCP.
• Translate investigation and threat hunting findings into actionable detection opportunities.
• Develop, test, and recommend new detection logic or enhancements to existing alerts.
• Identify visibility, telemetry, and detection gaps and work with partner teams to improve security coverage.
• Leverage automation, AI, machine learning, and analytical tools to accelerate investigations.
• Collaborate with cyber threat intelligence to incorporate emerging threats into investigations.
• Document investigation findings, timelines, methodologies, evidence, conclusions, and recommended remediation actions.
• Contribute to the development and continuous improvement of incident response procedures.
• Participate in post-incident reviews and lessons-learned activities.
• Communicate technical findings clearly to both technical and non-technical stakeholders.

Qualifications

• 3+ years of experience in cybersecurity with responsibilities in threat hunting, incident response, or security investigations.
• Experience conducting hypothesis-driven threat hunts to identify suspicious or malicious activity.
• Experience with adversary tactics, techniques, and procedures, including practical application of the MITRE ATT&CK framework.
• Experience analyzing various telemetry to identify indicators of compromise and anomalous behavior.
• Experience using SIEM, EDR/XDR, or security data platforms to query and analyze security telemetry.
• Experience using AI, machine learning, or automation technologies in security investigations.
• Experience with cloud security investigations across environments like AWS, Azure, or GCP.
• Knowledge of Windows and Linux environments, including analysis of system logs and common forensic artifacts.
• Ability to transition threat hunt findings into incident response actions.
• HS diploma or GED.

Nice If You Have

• Experience conducting structured threat hunts based on threat intelligence and developing detection analytics.
• Experience with scripting or automation using technologies such as Python, PowerShell, or SQL.
• Experience with cloud incident response involving cloud audit logs and containers.
• Experience with AI concepts, including detecting AI threats and attacks.
• Experience performing network analysis using packet captures and incorporating indicators into investigations.
• Experience with malware analysis, digital forensics, or endpoint investigation.
• Experience in a professional services or consulting environment.
• Ability to complete investigations or threat hunting activities with direct impact on service delivery.
• Possession of excellent analytical, investigative, and collaborative skills.
• Bachelor’s degree in Cybersecurity, CS, Information Systems, Engineering, or a related field.

Compensation

• Projected compensation range for this position is $69,400.00 to $158,000.00 (annualized USD).
• Salary determined by various factors including location, education, skills, and experience.

Identity Statement

As part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud.

Candidate AI Usage Policy

The use of artificial intelligence (AI) or other tools to assist with responses during interviews is prohibited unless permission is explicitly provided.

Work Model

• Remote: May require occasional in-person work at a Booz Allen or customer facility.
• Hybrid: Expected to work from a Booz Allen or customer facility as per leadership's expectations.
• Onsite: Work will primarily be performed full-time at a customer facility.

Commitment to Non-Discrimination

All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran, or any other status protected by applicable law.

About Us

Booz Allen is an advanced technology company that builds commercial-grade products and solutions for America’s most critical defense, civil, and national security priorities.