| Location | Washington, DC |
Position Title
Cyber Threat Intelligence & Threat Hunting Lead
Position Overview
The Cyber Threat Intelligence & Threat Hunting Lead will oversee integrated cyber threat intelligence (CTI), detection engineering, and proactive threat hunting operations supporting enterprise cyber defense missions.
The Lead will drive development of intelligence-driven detections, hunt methodologies, adversary tracking, SIEM content engineering, and operational threat-informed defense capabilities.
Key Responsibilities
Lead CTI, detection engineering, and threat hunting operations.
Develop intelligence-driven detection and hunt strategies.
Produce operational and strategic threat intelligence reporting.
Develop and maintain:
SIEM detections,
analytics,
correlation rules,
behavioral detections,
and hunt playbooks.
Conduct hypothesis-based threat hunting aligned to:
MITRE ATT&CK,
adversary TTPs,
malware campaigns,
and emerging threats.
Integrate CTI into SOC workflows, detection engineering, and incident response operations.
Analyze:
malware trends,
adversary infrastructure,
campaigns,
indicators,
and attack patterns.
Support automation and SOAR integration initiatives.
Brief executives and technical leadership on emerging threats and operational risk.
Required Qualifications
10+ years of cybersecurity operations experience.
5+ years supporting CTI, threat hunting, or detection engineering programs.
Experience with:
Splunk,
Sentinel,
CrowdStrike,
EDR telemetry,
detection content engineering,
and intelligence platforms.
Strong understanding of:
MITRE ATT&CK,
adversary tradecraft,
malware analysis,
and intelligence analysis methodologies.
Experience developing:
SIEM detections,
hunt analytics,
detection tuning,
and operational reporting.
Preferred Certifications