About this role

Job Responsibilities

- Proactive Threat Hunting & Team Leadership: Lead and coordinate enterprise threat hunting missions, directing proactive investigations, advanced security analytics, and hypothesis-driven hunting activities to identify sophisticated cyber threats and previously undetected malicious activity across federal systems.

- Advanced Threat Detection & Adversary Analysis: Analyze adversary behaviors, attack patterns, and emerging threats, including advanced persistent threats (APTs), to identify potential compromises, uncover security weaknesses, and develop actionable recommendations to strengthen enterprise defenses.

- Cross-Functional Security Collaboration: Coordinate with SOC analysts, Cyber Threat Intelligence (CTI) teams, cybersecurity business partners, and government stakeholders to investigate threats, share intelligence, validate findings, and support coordinated detection and mitigation efforts.

- Threat Hypothesis Development & Detection Engineering: Develop and refine threat hunting hypotheses, behavioral analytics, detection logic, and security monitoring use cases to improve the identification of malicious activity across endpoint, network, and enterprise security environments.

- Threat Intelligence & Indicator Management: Establish and maintain a centralized knowledge base of indicators of compromise (IOCs), adversary TTPs, threat hunting findings, and detection methodologies to support repeatable investigations, intelligence sharing, and continuous improvement of security operations.

- Purple Team Exercises & Threat Emulation: Support and lead collaborative Purple Team exercises and adversary emulation activities to assess security detection capabilities, simulate realistic attack techniques, identify monitoring gaps, and recommend enhancements to defensive controls.

- Security Framework Alignment & Continuous Improvement: Leverage MITRE ATT&CK and recognized threat hunting methodologies to map adversary techniques, evaluate detection coverage, improve hunting procedures, and provide technical guidance and mentorship to threat hunting and security operations personnel.

Job Requirements

- Cybersecurity & Threat Hunting Experience: Minimum of 10 years of progressive cybersecurity experience, including hands-on threat hunting, security monitoring, incident investigation, threat detection, or related defensive security disciplines within complex enterprise environments.

- Professional Certifications: Must possess at least one of the following certifications: Certified Information Systems Security Professional (CISSP), GIAC Certified Incident Handler (GCIH), GIAC Certified Forensic Analyst (GCFA), or Certified Ethical Hacker (CEH).

- Threat Detection Technologies & Security Frameworks: Demonstrated hands-on experience with Endpoint Detection and Response (EDR), Network Detection and Response (NDR), Security Information and Event Management (SIEM) platforms, MITRE ATT&CK, and adversary emulation techniques, including developing and executing advanced threat hunting methodologies.

- Operating Systems, Networking & Adversary Techniques: Strong technical understanding of Windows and Linux operating systems, enterprise networking, network protocols, endpoint security, and adversary tactics, techniques, and procedures (TTPs), with the ability to analyze sophisticated attack activity across enterprise infrastructure.

- Technical Leadership & Threat Intelligence Collaboration: Proven ability to lead threat hunting initiatives, develop threat hypotheses and detection logic, coordinate complex security investigations, and collaborate with SOC, CTI, engineering, and government stakeholders to identify, assess, and mitigate advanced cybersecurity threats.