Instead of waiting for an alert, you go looking — proactively hunting through a network on the assumption that an attacker is already inside and just hasn't been caught. Searching for the intruder before the alarm sounds.
The work is hypothesis-driven and investigative — forming a theory about how an attacker might hide, then digging through logs, endpoints, and traffic to prove or kill it. You assume the alerts missed something, and you're hunting for what's been deliberately concealed. Much of the craft is thinking like an attacker to find their tracks.
Maturity of the program shapes the role. Well-resourced teams give hunters time, tools, and data; leaner ones squeeze hunting between firefights. The work demands deep knowledge and patience, results aren't guaranteed, and many hunts end finding nothing at all. For some, the challenge is proving value when success is often silence.
It tends to fit the deeply curious and self-directed — senior-minded people comfortable chasing a hunch with no guarantee it pans out. If you want clear tasks and quick wins, open-ended hunting may frustrate. But if outmaneuvering an attacker who thinks they're hidden is the thrill, the role is advanced and highly valued.
Your job belongs to your employer.
Your career belongs to you.
Where this role sits in the broader career landscape — and where it can take you.
It's your career.
Take the wheel.
Roles like this one sit within a broader occupational category. The numbers below reflect that full landscape — helpful for context, but your specific experience will depend on level, specialty, and where you work.
No skills data available
Roles with similar work and overlapping career paths
View all Technology roles →Instead of waiting for an alert, you go looking — proactively hunting through a network on the assumption that an attacker is already inside and just hasn't been caught. Searching for the intruder before the alarm sounds.
Median pay for a Cyber Threat Hunter is about $109K nationally, with the field ranging roughly from $53K to $177K depending on experience, employer, and metro (BLS).
Employment in this field is projected to grow about 8.2% through 2034, with roughly 439,380 people working in it today (BLS).
Closely related roles include Security Management Consultant, IAM Consultant (Identity and Access Management Consultant), and Security Analyst.
Still figuring out what you want to become
when you grow up?