Cyber Threat Hunter Jobs
Cyber Threat Hunter jobs are open across financial services, defense contracting, healthcare, and enterprise technology, from analyst-level to senior and lead, with specializations in threat intelligence analysis, endpoint detection, and adversary emulation. Scan the live roles below and apply to whichever ones fit.
Find Cyber Threat Hunter JobsOverview
Showing 5 of 12+ Cyber Threat Hunter jobs
This position will be fully remote and can be hired anywhere in the continental U.S.
This team provides 24/7 support. This role requires shift flexibility, including the ability to rotate between days, mids, and nights.
At Optiv, we’re on a mission to help our clients make their businesses more secure. We’re one of the fastest-growing companies in a truly essential industry.
In your role at Optiv, you’ll be inspired by a team of the brightest business and technical minds in cybersecurity. We are passionate champions for our clients and know from experience that the best solutions for our clients’ needs come from working hard together. As part of our team, your voice matters, and you will do important work that has an impact, on people, businesses, and nations. Our industry and our company move fast, and you can be sure that you will always have room to learn and grow. We’re proud of our team and the important work we do to build confidence for a more connected world.
How you will make an impact:
- Proactively analyze, document and report on potential security incidents identified in Client environments.
- Collaborate with internal and client partners to maintain an understanding of security threats, vulnerabilities, and exploits that could impact systems, networks, and assets.
- Is primary POC and coordinator for clients during security events that require urgent response, containment, and remediation.
- Lead, mentor and develop other threat hunters and analysts.
- Provide security gap analysis and effectiveness assessments of security platform technologies or lack thereof to include, but not limited to SIEM, SOAR, XDR, EDR, content development collaboration solutions, network security devices (e.g., firewall/IDS/IPS), web application security, asset management, vulnerability scanners, etc.
- Be informed of new security technologies and assess them for opportunities to improve client security programs or achieve client outcomes.
- Effectively apply OSINT and client data to demonstrate risk of adversary activity and develop recommendations to reduce risk to include mitigation techniques and data to inform detection content or client policies.
- Actively solicit and collaborate with senior & principal analysts for observations to inform threat hunt activities.
- Ability to discuss security posture with multiple clients and make recommendations to better their holistic security approach.
- Lead, mentor, and influence internal teams and client counterparts as the subject matter expert.
- Develop and maintain SOP and KBs that enable effective and efficient content development, analyst understanding and response, and client action items.
What we are looking for:
- Bachelor of Science or Master’s Degree in Cyber Security or Computer Science, Computer/software engineering, program, or other focus area applicable to this industry combined with 8+ years of experience in Incident Response, Blue Team, and/or Red Team technical operations.
- Or equivalent education and training that is documented with certifications, performance evaluations, course diplomas, or official memorandum.
- GCFA, GCIA, GREM, GCIH, CEH, OSCP, and other relevant information security certifications
- Leadership experience with developing people or operations AND with completing projects, tasks, and problem solving.
- Experience with 3 or more of the following areas: Incident response processes, Detection Engineering, Malware analysis, Network analysis, Threat intelligence reporting and analysis, Attack and Penetration Testing, Digital Forensics, or cyber threat emulation.
- Experience with Cyber threat methodologies, including the Cyber Kill Chain, Pyramid of Pain, MITRE ATT&CK Matrix, and Diamond Model, and applying them to enterprise Cyber operations.
- Strong understanding of cybersecurity topics and current threat adversary TTPs.
- Strong understanding of Windows and Linux internals.
- Combination of skillsets covering both offensive and defensive security practices.
- Proven scripting experience with Python/PowerShell/Bash/WMIC or other languages.
- Experience with threat hunting lifecycle and application of tools.
- Expert level knowledge of security tools to include but not limited to CrowdStrike, CarbonBlack, Tanium, Splunk, Anomali, Sentinel, Vectra, and other tools highly desired.
- Expert level knowledge of tool integrations to perform data correlation and automation.
- Possession of excellent oral and written communication skills, including making clear and concise presentations to various audiences with an executive presence.
#LI-TW1
#LI-Remote
What you can expect from Optiv
- A company committed to our inclusive value through our Employee Resource Groups
- Work/life balance
- Professional training resources
- Creative problem-solving and the ability to tackle unique, complex projects
- Volunteer Opportunities. “Optiv Chips In” encourages employees to volunteer and engage with their teams and communities.
- The ability and technology necessary to productively work remotely/from home (where applicable)
EEO Statement
Optiv is an equal opportunity employer. All qualified applicants for employment will be considered without regard to race, color, religion, sex, gender identity or expression, sexual orientation, pregnancy, age 40 and over, marital status, genetic information, national origin, status as an individual with a disability, military or veteran status, or any other basis protected by federal, state, or local law.
Optiv respects your privacy. By providing your information through this page or applying for a job at Optiv, you acknowledge that Optiv will collect, use, and process your information, which may include personal information and sensitive personal information, in connection with Optiv’s selection and recruitment activities. For additional details on how Optiv uses and protects your personal information in the application process, click here to view our Applicant Privacy Notice. If you sign up to receive notifications of job postings, you may unsubscribe at any time.
This position will be fully remote and can be hired anywhere in the continental U.S.
This team provides 24/7 support. This role requires shift flexibility, including the ability to rotate between days, mids, and nights.
At Optiv, we’re on a mission to help our clients make their businesses more secure. We’re one of the fastest-growing companies in a truly essential industry.
In your role at Optiv, you’ll be inspired by a team of the brightest business and technical minds in cybersecurity. We are passionate champions for our clients and know from experience that the best solutions for our clients’ needs come from working hard together. As part of our team, your voice matters, and you will do important work that has an impact, on people, businesses, and nations. Our industry and our company move fast, and you can be sure that you will always have room to learn and grow. We’re proud of our team and the important work we do to build confidence for a more connected world.
How you will make an impact:
- Proactively analyze, document and report on potential security incidents identified in Client environments.
- Collaborate with internal and client partners to maintain an understanding of security threats, vulnerabilities, and exploits that could impact systems, networks, and assets.
- Is primary POC and coordinator for clients during security events that require urgent response, containment, and remediation.
- Lead, mentor and develop other threat hunters and analysts.
- Provide security gap analysis and effectiveness assessments of security platform technologies or lack thereof to include, but not limited to SIEM, SOAR, XDR, EDR, content development collaboration solutions, network security devices (e.g., firewall/IDS/IPS), web application security, asset management, vulnerability scanners, etc.
- Be informed of new security technologies and assess them for opportunities to improve client security programs or achieve client outcomes.
- Effectively apply OSINT and client data to demonstrate risk of adversary activity and develop recommendations to reduce risk to include mitigation techniques and data to inform detection content or client policies.
- Actively solicit and collaborate with senior & principal analysts for observations to inform threat hunt activities.
- Ability to discuss security posture with multiple clients and make recommendations to better their holistic security approach.
- Lead, mentor, and influence internal teams and client counterparts as the subject matter expert.
- Develop and maintain SOP and KBs that enable effective and efficient content development, analyst understanding and response, and client action items.
What we are looking for:
- Bachelor of Science or Master’s Degree in Cyber Security or Computer Science, Computer/software engineering, program, or other focus area applicable to this industry combined with 8+ years of experience in Incident Response, Blue Team, and/or Red Team technical operations.
- Or equivalent education and training that is documented with certifications, performance evaluations, course diplomas, or official memorandum.
- GCFA, GCIA, GREM, GCIH, CEH, OSCP, and other relevant information security certifications
- Leadership experience with developing people or operations AND with completing projects, tasks, and problem solving.
- Experience with 3 or more of the following areas: Incident response processes, Detection Engineering, Malware analysis, Network analysis, Threat intelligence reporting and analysis, Attack and Penetration Testing, Digital Forensics, or cyber threat emulation.
- Experience with Cyber threat methodologies, including the Cyber Kill Chain, Pyramid of Pain, MITRE ATT&CK Matrix, and Diamond Model, and applying them to enterprise Cyber operations.
- Strong understanding of cybersecurity topics and current threat adversary TTPs.
- Strong understanding of Windows and Linux internals.
- Combination of skillsets covering both offensive and defensive security practices.
- Proven scripting experience with Python/PowerShell/Bash/WMIC or other languages.
- Experience with threat hunting lifecycle and application of tools.
- Expert level knowledge of security tools to include but not limited to CrowdStrike, CarbonBlack, Tanium, Splunk, Anomali, Sentinel, Vectra, and other tools highly desired.
- Expert level knowledge of tool integrations to perform data correlation and automation.
- Possession of excellent oral and written communication skills, including making clear and concise presentations to various audiences with an executive presence.
#LI-TW1
#LI-Remote
What you can expect from Optiv
- A company committed to our inclusive value through our Employee Resource Groups
- Work/life balance
- Professional training resources
- Creative problem-solving and the ability to tackle unique, complex projects
- Volunteer Opportunities. “Optiv Chips In” encourages employees to volunteer and engage with their teams and communities.
- The ability and technology necessary to productively work remotely/from home (where applicable)
EEO Statement
Optiv is an equal opportunity employer. All qualified applicants for employment will be considered without regard to race, color, religion, sex, gender identity or expression, sexual orientation, pregnancy, age 40 and over, marital status, genetic information, national origin, status as an individual with a disability, military or veteran status, or any other basis protected by federal, state, or local law.
Optiv respects your privacy. By providing your information through this page or applying for a job at Optiv, you acknowledge that Optiv will collect, use, and process your information, which may include personal information and sensitive personal information, in connection with Optiv’s selection and recruitment activities. For additional details on how Optiv uses and protects your personal information in the application process, click here to view our Applicant Privacy Notice. If you sign up to receive notifications of job postings, you may unsubscribe at any time.
See All 12 Cyber Threat Hunter Jobs
Find roles that match your experience and apply in just a few clicks.
Find Cyber Threat Hunter JobsCyber Threat Hunter Job Market
Who's Hiring
Top Industries Hiring
- Animal Care & Pet Services
What Employers Look For
The qualifications that appear most often in cyber threat hunter jobs.
- Hands-on experience with SIEM platforms and endpoint detection and response tools
- Proficiency with MITRE ATT&CK framework for threat modeling and hunt development
- Three or more years of experience in security operations, incident response, or threat intelligence
- Active or obtainable security clearance, often Secret or above for government and defense roles
- Industry certifications such as GCIH, GCFA, GDAT, CEH, or equivalent
- Scripting ability in Python, PowerShell, or KQL for custom detection rule development
Tips for Your Cyber Threat Hunter Job Search
Tailor your resume to detection methodologies
Hiring managers in this field scan for specific frameworks like MITRE ATT&CK and kill-chain analysis. Name the detection methodologies you've actually applied, not just the tools, so your resume reads as hands-on rather than theoretical.
Highlight certifications that signal active hunting skills
Certifications like GCIH, GCFA, or GDAT carry real weight for cyber threat hunter roles because they signal practical threat-hunting and incident-handling skills. List them prominently and include the year earned so reviewers know they're current.
Filter openings by clearance level before applying
Many cyber threat hunter postings in defense and government contracting require an active security clearance. Check the clearance requirement before you apply, since applying without the specified clearance level wastes your time and the reviewer's.
Apply early to roles that fit
Migrate Mate lists cyber threat hunter openings from across the United States in one place, so you can find roles that match and apply directly to each listing.
Prepare a threat hunt walkthrough for interviews
Interviewers frequently ask you to walk through a past hunt end to end, from hypothesis to findings. Prepare one tight example that covers your data sources, the detection logic you used, and what the outcome was, with enough detail to invite follow-up questions.
Negotiate by scoping the on-call and incident response expectations
Cyber threat hunter roles often blur into incident response coverage, which affects your actual workload significantly. Before accepting an offer, ask how often hunters are pulled into active IR events and whether that work is compensated separately.
Cyber Threat Hunter Jobs: Frequently Asked Questions
Which companies are hiring the most cyber threat hunters?
The companies hiring the most cyber threat hunters right now include Invictus International Consulting, AT&T, and Optiv, with the largest share of openings in Ohio, Virginia, and Maine, based on current listings on Migrate Mate as of November 2026. Defense contractors, managed security service providers, and large financial institutions consistently post the highest volumes of these roles.
How many cyber threat hunter jobs are remote?
About 100% of cyber threat hunter openings are fully remote or hybrid as of November 2026, though the share varies significantly by employer type. Threat intelligence analysis and detection engineering sub-specialties tend to be the most remote-friendly, while roles tied to classified environments or on-site security operations centers are almost always fully on-site.
How do you become a cyber threat hunter?
Start by building a foundation in security operations, typically through a SOC analyst or incident response role where you work with SIEM platforms and log analysis daily. From there, develop hypothesis-driven hunting skills by studying adversary behaviors using resources like MITRE ATT&CK, practice building detection logic, and pursue certifications such as GCIH or GCFA to validate your hands-on capabilities to employers.
Can you get a cyber threat hunter job with little experience?
Entry into this field is challenging but possible with the right foundation. Employers hiring junior hunters typically look for candidates with SOC or blue-team experience, demonstrated familiarity with log analysis, and at least one recognized certification. Building a home lab, contributing to open-source detection projects, or completing threat hunt challenges on capture-the-flag platforms can substitute for formal job experience when your resume is otherwise thin.
What does the cyber threat hunter interview process look like?
Most processes include a recruiter screen, a technical phone interview covering your detection experience and tool familiarity, and then a practical stage where you walk through a past hunt or work through a scenario live. Some employers add a take-home exercise requiring you to analyze sample log data and document your findings. Final rounds typically involve meeting the security leadership team and discussing your approach to adversary emulation and reporting.
Where can I find and apply to cyber threat hunter jobs?
You can find and apply to cyber threat hunter jobs on Migrate Mate, which lists current openings from across the United States in one place. Search the listings to find roles that match your experience, clearance level, and preferred location, then apply directly to each one that fits.
See All 12 Cyber Threat Hunter Jobs
Find roles that match your experience and apply in just a few clicks.
Find Cyber Threat Hunter Jobs