Cyber Hunt Senior Analyst

Everforth ECS is seeking a Cyber Hunt Senior Analyst who lives in close proximity to the National Capital Region (NCR) to join a premier, enterprise-scale cybersecurity program supporting a major federal civilian agency.

Please Note: This position is contingent upon contract award.

Salary Range: $165,000 - $185,000

This flagship initiative unifies 24x7x365 Security Operations (SOC), proactive threat hunting, and advanced Security Engineering and Architecture into a cohesive defensive mission. As a senior technical expert on this program, you will drive the protection of highly sensitive, national-level financial, and personally identifiable information (PII). You will be at the forefront of modernizing the agency's cyber posture, implementing advanced automation, and ensuring continuous operational resilience across a massive, highly complex federal IT enterprise.

As a Cyber Hunt Senior Analyst, you will serve as a principal technical authority across threat hunting, cyber threat intelligence (CTI), and detection engineering operations. Working alongside the Cyber Hunt Team Leader, SOC analysts, and agency stakeholders, you will develop and refine advanced detection frameworks, lead threat emulation activities, and deliver high-impact intelligence that measurably reduces risk across the enterprise. Your expertise will directly shape the agency's ability to detect, respond to, and recover from the most sophisticated adversaries operating in today's threat landscape.

Position Responsibilities:

• Provide strategic oversight and technical leadership for threat hunting, CTI, and SOC analysts across the program.
• Advise on threat modeling, adversary emulation, and Purple Team exercises to validate and strengthen the agency's defensive posture.
• Support interagency collaboration and national-level threat intelligence sharing initiatives.
• Lead the development and continuous improvement of threat detection frameworks and advanced analytics capabilities.
• Apply the MITRE ATT&CK framework to map observed adversary behaviors to specific techniques, turning fragmented alerts into clear and actionable threat narratives.
• Develop and refine detection engineering strategies, including hypothesis-driven hunting methodologies and behavioral analytics.
• Support the design and execution of adversary emulation exercises to proactively test and improve detection coverage.
• Conduct deep-dive analysis of threat actor profiles, campaigns, and TTPs to inform defensive priorities.
• Produce high-quality threat intelligence reports and briefings for both technical teams and senior government officials.
• Collaborate with SOC, engineering, and architecture teams to ensure detection logic and hunt findings are operationalized across the enterprise.
• Mentor and provide guidance to junior and mid-level hunt analysts, fostering a culture of continuous learning and technical excellence.

Contribute to the development and maintenance of team playbooks, standard operating procedures, and knowledge management repositories.

• U.S. Citizenship required.

• 12+ years of experience in cybersecurity and threat intelligence, with a demonstrated focus on threat hunting, detection engineering, and adversary analysis.

• Remote but within close proximity to the NCR.

• Active Public Trust 6c clearance, or the ability to obtain and maintain one.

• Deep knowledge of behavioral analytics, threat actor profiling, and detection engineering methodologies.

• Hands-on experience with the MITRE ATT&CK framework, including TTP mapping, detection logic development, and adversary emulation.

• Familiarity with CISA threat hunting guidance and federal cybersecurity standards and frameworks.

• Experience with EDR/NDR platforms, SIEM technologies, and cloud-native security tools.

• Proven ability to translate complex technical findings into clear, actionable language for both technical teams and executive and stakeholder audiences.

• Strong written and verbal communication skills, with a track record of producing high-quality federal security documentation.

• Experience supporting interagency threat intelligence sharing and collaboration within federal environments.

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field or equivalent professional experience.

• One of the following certifications:

• Certified Information Systems Security Professional (CISSP)

• GIAC Certified Incident Handler (GCIH)

• GIAC Certified Forensic Analyst (GCFA)

• Certified Ethical Hacker (CEH)

• MITRE ATT&CK Defender (MAD)

• GIAC Cyber Threat Intelligence (GCTI)

• GIAC Cloud Threat Detection (GCTD)

• Certified Information Security Manager (CISM)

• GIAC Security Expert (GSE)

• Familiarity with federal cybersecurity frameworks including NIST RMF, NIST SP 800-53, and FedRAMP compliance requirements.

• Experience supporting continuous monitoring programs and coordinating with SOC teams on POA&M remediation tracking.

• Prior experience working on large-scale federal civilian agency programs with complex, multi-stakeholder environments.

• Experience conducting or supporting ICS/OT and cloud-based threat hunting operations.

• Ability to provide strategic guidance that enhances and optimizes an agency's overall cybersecurity posture.

• Experience working within or alongside a Cyber Threat Intelligence (CTI) program, including the structured analysis of threat actor campaigns.

• Familiarity with DevSecOps pipelines and vulnerability management tools in federal cloud environments.

ECS Federal LLC is an equal opportunity employer and does not discriminate or allow discrimination on the basis any characteristic protected by law. All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, or local jurisdiction law.

Everforth ECS is the federal segment of Everforth, a $4B global organization with over 10,000 employees. Our nearly 3,500 professionals deliver advanced technology solutions in data and AI, cybersecurity, and enterprise transformation, serving defense, intelligence, and federal civilian agencies.

Our work powers mission-critical outcomes, strengthens technology partnerships, and creates meaningful opportunities for our people. We are defined by a commitment to excellence in delivery, a culture of innovation, and an environment where talent can thrive and grow.

We value:

• Attracting and developing top talent and high-performing teams
• Fostering a culture that is engaging, accountable, and mission-driven

Meet the challenge. Make a difference with Everforth ECS!