Cyber Hunt Team Leader

This is a fully remote position, open to applicants in District of Columbia.

📋 Description

• Oversee and orchestrate enterprise threat hunting missions, proactive investigations, advanced security analytics, and hypothesis-driven hunting activities across federal systems.

• Examine adversary behaviors, attack patterns, emerging threats, advanced persistent threats (APTs), potential compromises, and security vulnerabilities.

• Collaborate with SOC analysts, Cyber Threat Intelligence (CTI) teams, cybersecurity business partners, and government stakeholders to investigate threats, exchange intelligence, validate findings, and assist in detection and mitigation efforts.

• Create and enhance threat hunting hypotheses, behavioral analytics, detection logic, and security monitoring use cases across endpoint, network, and enterprise environments.

• Sustain a centralized repository of indicators of compromise (IOCs), adversary TTPs, threat hunting discoveries, and detection methodologies.

• Lead and support Purple Team exercises and adversary emulation activities; identify monitoring deficiencies and recommend improvements to defensive controls.

• Employ MITRE ATT&CK and established threat hunting methodologies to map adversary techniques, assess detection coverage, enhance hunting processes, and mentor security staff.

⛳️ Requirements

• A minimum of 10 years of progressive cybersecurity experience, including hands-on threat hunting, security monitoring, incident investigation, threat detection, or related defensive security fields within intricate enterprise environments.

• Must hold at least one of the following certifications: Certified Information Systems Security Professional (CISSP), GIAC Certified Incident Handler (GCIH), GIAC Certified Forensic Analyst (GCFA), or Certified Ethical Hacker (CEH).

• Proven hands-on experience with Endpoint Detection and Response (EDR), Network Detection and Response (NDR), Security Information and Event Management (SIEM) platforms, MITRE ATT&CK, and adversary emulation techniques, including the development and execution of advanced threat hunting methodologies.

• Strong technical comprehension of Windows and Linux operating systems, enterprise networking, network protocols, endpoint security, and adversary tactics, techniques, and procedures (TTPs).

• Demonstrated capability to lead threat hunting initiatives, formulate threat hypotheses and detection logic, coordinate intricate security investigations, and collaborate with SOC, CTI, engineering, and government stakeholders.

🏝️ Benefits

• Recognized as a Best Places to Work honoree.

• Veteran-owned small business culture with a people-first approach.