Job Details

Job Duties

Halliburton is seeking a seasoned incident responder with deep expertise in threat hunting to join our global security team. This individual will lead high-impact investigations, proactively hunt for threats in complex enterprise environments, and provide expert guidance in detecting, containing, and eradicating advanced adversaries. Ideal candidates have operated in high-stakes consulting environments, demonstrated mastery in both forensics and threat detection, and can translate technical findings into business impact.

• Lead and execute digital forensics and incident response (DFIR) engagements for internal and external threats.
• Conduct proactive threat hunting operations across endpoints, logs, and cloud platforms to identify stealthy or novel attack patterns.
• Perform root cause analysis using forensic tools (X-Ways, Magnet AXIOM, Volatility, Cellebrite, etc.).
• Develop, refine, and tune detection logic in SIEM and EDR platforms (e.g., Splunk, LogScale, CrowdStrike).
• Collaborate with SOC, engineering, and red/purple teams to close detection gaps and improve incident response playbooks.
• Deliver actionable reporting and threat intelligence to technical and executive stakeholders.
• Mentor junior responders and contribute to team capability building

Qualifications

• 5+ years of experience in digital forensics, incident response, or threat hunting roles
• Proven consulting experience with global IR firms or world class internal IR functions
• Strong command of adversary TTPs (MITRE ATT&CK), malware analysis fundamentals, and intrusion lifecycle
• Proficiency in Python or PowerShell to automate analysis or detection workflows is a plus
• Experience with cloud forensics is a strong advantage
• Certifications such as GCFA, GCIH, GREM, CISSP, or eCPPTv2 are preferred

Candidates having qualifications that exceed the minimum job requirements will receive consideration for higher level roles given (1) their experience, (2) additional job requirements, and/or (3) business needs.  Depending on education, experience, and skill level, a variety of job opportunities might be available, including Domain Architect.

Job Duties

Halliburton is seeking a seasoned incident responder with deep expertise in threat hunting to join our global security team. This individual will lead high-impact investigations, proactively hunt for threats in complex enterprise environments, and provide expert guidance in detecting, containing, and eradicating advanced adversaries. Ideal candidates have operated in high-stakes consulting environments, demonstrated mastery in both forensics and threat detection, and can translate technical findings into business impact.

• Lead and execute digital forensics and incident response (DFIR) engagements for internal and external threats.
• Conduct proactive threat hunting operations across endpoints, logs, and cloud platforms to identify stealthy or novel attack patterns.
• Perform root cause analysis using forensic tools (X-Ways, Magnet AXIOM, Volatility, Cellebrite, etc.).
• Develop, refine, and tune detection logic in SIEM and EDR platforms (e.g., Splunk, LogScale, CrowdStrike).
• Collaborate with SOC, engineering, and red/purple teams to close detection gaps and improve incident response playbooks.
• Deliver actionable reporting and threat intelligence to technical and executive stakeholders.
• Mentor junior responders and contribute to team capability building

Qualifications

• 5+ years of experience in digital forensics, incident response, or threat hunting roles
• Proven consulting experience with global IR firms or world class internal IR functions
• Strong command of adversary TTPs (MITRE ATT&CK), malware analysis fundamentals, and intrusion lifecycle
• Proficiency in Python or PowerShell to automate analysis or detection workflows is a plus
• Experience with cloud forensics is a strong advantage
• Certifications such as GCFA, GCIH, GREM, CISSP, or eCPPTv2 are preferred

Candidates having qualifications that exceed the minimum job requirements will receive consideration for higher level roles given (1) their experience, (2) additional job requirements, and/or (3) business needs.  Depending on education, experience, and skill level, a variety of job opportunities might be available, including Domain Architect.

Job Duties

Halliburton is seeking a seasoned incident responder with deep expertise in threat hunting to join our global security team. This individual will lead high-impact investigations, proactively hunt for threats in complex enterprise environments, and provide expert guidance in detecting, containing, and eradicating advanced adversaries. Ideal candidates have operated in high-stakes consulting environments, demonstrated mastery in both forensics and threat detection, and can translate technical findings into business impact.

• Lead and execute digital forensics and incident response (DFIR) engagements for internal and external threats.
• Conduct proactive threat hunting operations across endpoints, logs, and cloud platforms to identify stealthy or novel attack patterns.
• Perform root cause analysis using forensic tools (X-Ways, Magnet AXIOM, Volatility, Cellebrite, etc.).
• Develop, refine, and tune detection logic in SIEM and EDR platforms (e.g., Splunk, LogScale, CrowdStrike).
• Collaborate with SOC, engineering, and red/purple teams to close detection gaps and improve incident response playbooks.
• Deliver actionable reporting and threat intelligence to technical and executive stakeholders.
• Mentor junior responders and contribute to team capability building

Qualifications

• 5+ years of experience in digital forensics, incident response, or threat hunting roles
• Proven consulting experience with global IR firms or world class internal IR functions
• Strong command of adversary TTPs (MITRE ATT&CK), malware analysis fundamentals, and intrusion lifecycle
• Proficiency in Python or PowerShell to automate analysis or detection workflows is a plus
• Experience with cloud forensics is a strong advantage
• Certifications such as GCFA, GCIH, GREM, CISSP, or eCPPTv2 are preferred

Candidates having qualifications that exceed the minimum job requirements will receive consideration for higher level roles given (1) their experience, (2) additional job requirements, and/or (3) business needs.  Depending on education, experience, and skill level, a variety of job opportunities might be available, including Domain Architect.

Job Duties

Halliburton is seeking a seasoned incident responder with deep expertise in threat hunting to join our global security team. This individual will lead high-impact investigations, proactively hunt for threats in complex enterprise environments, and provide expert guidance in detecting, containing, and eradicating advanced adversaries. Ideal candidates have operated in high-stakes consulting environments, demonstrated mastery in both forensics and threat detection, and can translate technical findings into business impact.

• Lead and execute digital forensics and incident response (DFIR) engagements for internal and external threats.
• Conduct proactive threat hunting operations across endpoints, logs, and cloud platforms to identify stealthy or novel attack patterns.
• Perform root cause analysis using forensic tools (X-Ways, Magnet AXIOM, Volatility, Cellebrite, etc.).
• Develop, refine, and tune detection logic in SIEM and EDR platforms (e.g., Splunk, LogScale, CrowdStrike).
• Collaborate with SOC, engineering, and red/purple teams to close detection gaps and improve incident response playbooks.
• Deliver actionable reporting and threat intelligence to technical and executive stakeholders.
• Mentor junior responders and contribute to team capability building

Qualifications

• 5+ years of experience in digital forensics, incident response, or threat hunting roles
• Proven consulting experience with global IR firms or world class internal IR functions
• Strong command of adversary TTPs (MITRE ATT&CK), malware analysis fundamentals, and intrusion lifecycle
• Proficiency in Python or PowerShell to automate analysis or detection workflows is a plus
• Experience with cloud forensics is a strong advantage
• Certifications such as GCFA, GCIH, GREM, CISSP, or eCPPTv2 are preferred

Candidates having qualifications that exceed the minimum job requirements will receive consideration for higher level roles given (1) their experience, (2) additional job requirements, and/or (3) business needs.  Depending on education, experience, and skill level, a variety of job opportunities might be available, including Domain Architect.