ZipRecruiter

Log In

1

Threat Hunting Detection Engineer Jobs (NOW HIRING)

ECS

Detection Engineer - Threat Hunter

Arlington, VA · On-site

$170K - $190K/yr

This role combines threat hunting, detection engineering, and security analytics to improve the organization's ability to identify malicious activity before it results in business impact. The ideal ...

ADP

Sr. Lead Threat Detection Engineer

Roseland, NJ · On-site

$123K - $169K/yr

ADP is hiring a Senior Lead Threat Detection Engineer. * Are you a technologist, first and foremost ... Co-develop a roadmap for the Threat Detection team that will align with the overall Hunt and ...

Centurion Consulting Group

Threat Hunting Analyst

Detection Engineering and Continuous Improvement Translate successful hunts into robust, high ... Threat Intelligence Consumption Integrate internal and external threat intelligence into hunt ...

ADP

Sr. Lead Threat Detection Engineer

Roseland, NJ · On-site

$110K - $145K/yr

ADP is hiring a Senior Lead Threat Detection Engineer. * Are you a technologist, first and foremost ... Co-develop a roadmap for the Threat Detection team that will align with the overall Hunt and ...

Alliant Credit Union

Cyber Threat Analyst

Chicago, IL · On-site

$69K - $108K/yr

Map operational intelligence to MITRE ATT&CK tactics and techniques to inform detection engineering, threat hunting, purple team exercises, and security control assessments. * Contribute to finished ...

Alliant Credit Union

Cyber Threat Analyst

Chicago, IL · Hybrid

$69K - $108K/yr

Map operational intelligence to MITRE ATT&CK tactics and techniques to inform detection engineering, threat hunting, purple team exercises, and security control assessments. * Contribute to finished ...

Alliant Credit Union

Cyber Threat Analyst

Chicago, IL · On-site

$69K - $108K/yr

Map operational intelligence to MITRE ATT&CK tactics and techniques to inform detection engineering, threat hunting, purple team exercises, and security control assessments. * Contribute to finished ...

Alliant

Cyber Threat Analyst

Chicago, IL · On-site

$69K - $108K/yr

Map operational intelligence to MITRE ATT&CK tactics and techniques to inform detection engineering, threat hunting, purple team exercises, and security control assessments. * Contribute to finished ...

Northern Base

Threat Hunting Consultant

San Jose, CA · Remote

Knowledge of SIEM architecture, data onboarding, and optimization techniques Threat Hunting and Detection Engineering * Demonstrated experience conducting hypothesis-driven threat hunts * Strong ...

Leidos

Senior Threat Hunter

Sierra Vista, AZ · On-site

$89K - $114K/yr

Working knowledge of adversary tactics, techniques, and procedures (TTPs) and their application to threat hunting, detection engineering, and incident response. * Experience operating in complex ...

next page

Showing results 1-20

All JobsThreat Hunting Detection Engineer Jobs

Threat Hunting Detection Engineer information

See salary details

$29

$66

$96

How much do threat hunting detection engineer jobs pay per hour?

As of Sep 11, 2026, the average hourly pay for threat hunting detection engineer in the United States is $66.40, according to ZipRecruiter salary data. Most workers in this role earn between $56.49 and $75.48 per hour, depending on experience, location, and employer.

What are popular job titles related to Threat Hunting Detection Engineer jobs?

For Threat Hunting Detection Engineer jobs, the most frequently searched job titles are:

Infographic showing various Threat Hunting Detection Engineer job openings in the United States as of September 2026, with employment types broken down into 67% Full Time, and 33% Contract. Highlights an 67% In-person, and 33% Remote job distribution, with an average salary of $138,117 per year, or $66.4 per hour.

Detection Engineer - Threat Hunter

Arlington, VA • On-site

ECS
See more jobs at ECSexternal

$170K - $190K/yr

Full-time

Posted 6 days ago

Job description

Everforth ECS is seeking a Detection Engineer - Threat Hunter to join our team in Arlington, VA (Hybrid). This position is contingent upon award.
We are seeking a highly motivated Detection Engineer / Threat Hunter to proactively identify, detect, and mitigate advanced cyber threats across the enterprise environment. This role combines threat hunting, detection engineering, and security analytics to improve the organization's ability to identify malicious activity before it results in business impact.
The ideal candidate will have experience working within Security Operations Centers (SOC), Incident Response, Detection Engineering, or Threat Hunting teams and possess strong analytical skills, knowledge of adversary tactics and techniques, and expertise in developing high-fidelity security detections.
Key Responsibilities
Threat Hunting
  • Conduct proactive threat hunting activities to identify malicious, suspicious, or unauthorized activity across enterprise networks, endpoints, cloud environments, and applications.
  • Leverage threat intelligence, behavioral analytics, and emerging threat research to develop hunting hypotheses.
  • Investigate anomalous events and indicators that may represent compromise or active threats and translate findings into formal hunt/detection guidance.
  • Document threat hunting methodologies, findings, and recommendations.

Detection Engineering
  • Design, develop, test, and maintain security detection content across SIEM, EDR/XDR, NDR, and cloud security platforms.
  • Create and tune detection logic based on adversary TTPs, threat intelligence, and attack simulations.
  • Develop and maintain Sigma rules, YARA signatures, SIEM queries, analytics rules, and detection playbooks.
  • Continuously improve detection coverage using MITRE ATT&CK and industry threat frameworks.
  • Define and validate true-positive criteria and effectively tunes/retires weak detections.

Security Analytics
  • Analyze large volumes of security telemetry from endpoints, networks, cloud platforms, identity systems, and applications.
  • Correlate threat intelligence with internal security data to identify emerging threats.
  • Perform root cause analysis and provide actionable recommendations to improve detection effectiveness.
  • Develop metrics and dashboards that measure detection coverage and security monitoring effectiveness.

Incident Response Support
  • Partner with Incident Response and SOC teams during active investigations.
  • Provide advanced threat analysis and forensic context during security incidents.
  • Assist with containment, eradication, and recovery efforts when necessary.
  • Create post-incident detection enhancements to prevent adversary re-entry.

Threat Intelligence Integration
  • Consume and operationalize threat intelligence from commercial, government, open-source, and internal sources.
  • Map intelligence findings to security controls and detection opportunities.
  • Identify threat actor tactics, techniques, procedures (TTPs), and Indicators of Compromise (IOCs).
  • Collaborate with Cyber Threat Intelligence teams to enhance security monitoring capabilities.

Continuous Improvement
  • Assess existing detections for effectiveness and false-positive reduction opportunities.
  • Conduct adversary emulation and purple team exercises to validate detection capabilities.
  • Identify visibility gaps and recommend additional logging, telemetry, and monitoring controls.
  • Stay current on emerging cyber threats, attacker methodologies, and detection technologies.

Salary Range: $170,000 - $190,000
General Description of Benefits
  • Top Secret Clearance
  • Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field, or equivalent experience.
  • 7+ years of experience in cybersecurity, with direct experience in Threat Hunting, Detection Engineering, Security Operations, or Incident Response.
  • Strong understanding of attacker tactics, techniques, and procedures (TTPs).
  • Experience with SIEM platforms and security analytics tools.
  • Knowledge of MITRE ATT&CK, Cyber Kill Chain, and threat hunting methodologies.
  • Experience analyzing endpoint, network, cloud, and identity-based security telemetry.
  • Familiarity with scripting and automation using Python, PowerShell, KQL, or similar languages.
  • Strong critical-thinking, investigative, and problem-solving skills.

Apply