Security Analysis Threat Hunter

Company overview: NTT DATA strives to hire exceptional, innovative and passionate individuals who want to grow with us. If you want to be part of an inclusive, adaptable, and forward-thinking organization, apply now. NTT DATA's Client is currently seeking a Security Analysis Threat Hunter - Addison, TX Hybrid to join their team in Addison, Texas (US-TX), United States (US).

About the role

The Threat Hunting function is responsible for identifying and validating suspicious or malicious activity. Ownership of vulnerability remediation tracking and patch management remains with the Vulnerability Management teams. Threat Hunters focus on detection, validation, and enablement of defensive controls. This role focuses on hypothesis-driven, intelligence-led, and MITRE Telecommunication&CK-aligned threat hunting. The specialist works closely with SOC, SIEM, Vulnerability Management, and Incident Response teams to improve detection coverage, reduce attacker dwell time, and continuously enhance NTT DATA's managed security services capabilities. This position will be on-site at the client site 4 days per week. Only local candidates will be considered.

Responsibilities

• Conduct hypothesis-driven and tactic-based threat hunts aligned to the MITRE Telecommunication®&CK framework.
• Identify low-and-slow, post-compromise attacker behavior not detected through automated alerts.
• Ingest and operationalize internal and external threat intelligence into hunting hypotheses.
• Develop and execute advanced threat hunting queries across SIEM, EDR, and security analytics platforms.
• Collaborate with SOC, SIEM, and Incident Response teams to escalate confirmed threats and support containment.
• Identify telemetry gaps and work with engineering teams to improve visibility and logging.
• Feed validated hunt results into detection engineering, threat briefs, and use-case improvements.
• Participate in threat hunt working sessions, operational reviews, and customer-facing discussions as required.

Requirements

• 10+ years' experience in Cyber Security

Skills

• Strong understanding of adversary tactics, techniques, and procedures (TTPs).
• Hands-on experience performing structured threat hunts in enterprise environments.
• Proficiency with SIEM query languages and endpoint telemetry analysis.
• Ability to translate threat intelligence into actionable security detections.
• Strong written and verbal communication skills for technical and executive audiences.

Qualifications

• Preferred Certifications: GIAC Certified Threat Intelligence (GCTI), GIAC Certified Incident Handler (GCIH), CompTIA CySA+, Certified Ethical Hacker (CEH)

Benefits

• Medical, dental, and vision insurance with employer contribution
• Flexible spending or health savings account
• Life and AD&D insurance
• Short and long term disability coverage
• Paid time off
• Employee assistance
• Participation in a 401k program with company match
• Additional voluntary or legally-required benefits

Schedule

On-site at the client site 4 days per week (hybrid). Only local candidates will be considered.