Job Overview

we are looking for the right people - people who want to innovate, achieve, grow and lead. we attract and retain the best talent by investing in our employees and empowering them to develop themselves and their careers. experience the challenges, rewards and opportunity of working for one of the world's largest providers of products and services to the global energy industry.

job duties

halliburton is seeking a seasoned incident responder with deep expertise in threat hunting to join our global security team. this individual will lead high-impact investigations, proactively hunt for threats in complex enterprise environments, and provide expert guidance in detecting, containing, and eradicating advanced adversaries. ideal candidates have operated in high-stakes consulting environments, demonstrated mastery in both forensics and threat detection, and can translate technical findings into business impact.

• lead and execute digital forensics and incident response (dfir) engagements for internal and external threats.
• conduct proactive threat hunting operations across endpoints, logs, and cloud platforms to identify stealthy or novel attack patterns.
• perform root cause analysis using forensic tools (x-ways, magnet axiom, volatility, cellebrite, etc.).
• develop, refine, and tune detection logic in siem and edr platforms (e.g., splunk, logscale, crowdstrike).
• collaborate with soc, engineering, and red/purple teams to close detection gaps and improve incident response playbooks.
• deliver actionable reporting and threat intelligence to technical and executive stakeholders.
• mentor junior responders and contribute to team capability building

qualifications

• 5+ years of experience in digital forensics, incident response, or threat hunting roles
• proven consulting experience with global ir firms or world class internal ir functions
• strong command of adversary ttps (mitre att&ck), malware analysis fundamentals, and intrusion lifecycle
• proficiency in python or powershell to automate analysis or detection workflows is a plus
• experience with cloud forensics is a strong advantage
• certifications such as gcfa, gcih, grem, cissp, or ecpptv2 are preferred

candidates having qualifications that exceed the minimum job requirements will receive consideration for higher level roles given (1) their experience, (2) additional job requirements, and/or (3) business needs. depending on education, experience, and skill level, a variety of job opportunities might be available, including domain architect.
halliburton is an equal opportunity employer. employment decisions are made without regard to race, color, religion, disability, genetic information, pregnancy, citizenship, marital status, sex/gender, sexual preference/ orientation, gender identity, age, veteran status, national origin, or any other status protected by law or regulation.

location
3000 n. sam houston parkway e., houston, texas, 77032, united states

job details
requisition number: 201426
experience level: experienced hire
job family: support services
product service line: global information security
full time / part time: full time
additional locations for this position:

compensation information
compensation is competitive and commensurate with experience.