Cyber Threat Hunt Lead - Clearance Required

Overview:

Cydecor is a premier Federal Government solutions provider, delivering differentiated innovations in mission systems and business platforms. We leverage leading-edge secure systems and software development, backed by industry-leading subject matter expertise, and business intelligence to enable decision-support and remain ahead of ever-evolving national security challenges. Our success rests squarely on three bedrock principles: People, our center of gravity; Mission, what inspires us; and an unyielding commitment to Excellence, what separates us.

Job Description:

We are seeking an experienced Cyber Threat Hunt Lead to lead proactive threat hunting operations within a 24/7 SOC environment, leveraging cyber threat intelligence to identify, analyze, and mitigate advanced threats across enterprise networks. This role provides technical leadership, operational oversight, and strategic direction across threat hunting, detection engineering, and cyber defense activities.

Responsibilities include:

• Lead enterprise threat hunting operations across network, endpoint, and cloud environments to identify previously unknown or emerging threats
• Plan, develop, and execute threat hunting campaigns based on adversary tactics, techniques, and procedures (TTPs)
• Leverage cyber threat intelligence (CTI) to prioritize hunting activities and align efforts with current threat landscape and organizational risk
• Analyze host and network telemetry to identify indicators of compromise (IOCs), anomalous behavior, and advanced attack patterns
• Develop and refine detection logic, analytics, signatures, and queries to improve threat detection capabilities
• Collaborate with incident response, threat intelligence, and security engineering teams to validate findings and coordinate remediation efforts
• Investigate and escalate confirmed threats, ensuring proper documentation and communication with leadership and stakeholders
• Maintain and prioritize a threat hunting backlog, tracking activities, findings, and success metrics
• Utilize SIEM, EDR, network monitoring, and endpoint visibility tools to support threat hunting operations
• Interpret and analyze scripts and code (e.g., Python, VBScript, C++, XML) to support threat detection and analysis efforts
• Identify gaps in detection coverage and recommend improvements to enhance overall security posture
• Stay current on evolving cyber threats, threat actors, and adversary methodologies to continuously improve hunting effectiveness
• Provide technical leadership and mentorship to threat hunting analysts and SOC personnel
• Develop reports, dashboards, and briefings to communicate findings, trends, and risk posture to leadership
• Lead the Cyber Threat Hunt team to propose corrective actions and inform the necessary parties of security issues, reportable offenses, or cybersecurity best practices.

Here's what you need (Required Qualifications):

• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or related field (or equivalent experience)
• Minimum of 5 years of experience as a senior cyber threat hunt analyst or in a similar cybersecurity role
• Minimum of 5 years of hands-on experience conducting host-based and network-based security monitoring and analysis
• Certified Ethical Hacker (CEH) or one of the following:
  • DoD 8570 IAT Level II (or DoD 8140 equivalent)
  • DoD 8570 IAM Level I (or DoD 8140 equivalent)
  • CSSP Analyst or CSSP Incident Responder certification
• Strong experience performing threat hunting, threat analysis, and network traversal within enterprise environments
• Proficiency with SIEM platforms and networked-device management tools such as Splunk and Tanium
• Hands-on experience with endpoint detection and response (EDR), intrusion detection systems (IDS), and network monitoring tools
• Strong understanding of cyber threat intelligence and the application of TTPs to threat hunting operations
• Experience identifying, analyzing, and responding to advanced cyber threats, including malware and intrusion activity
• Ability to develop detection content, including queries, rules, signatures, and analytics
• Experience analyzing scripts and code in multiple formats to support threat detection and investigation
• Strong understanding of cybersecurity principles, attack methodologies, and adversary behaviors
• Experience coordinating with cross-functional teams to remediate identified threats and vulnerabilities

Bonus Points If You Have (Desired Qualifications):

• GIAC certifications such as GCFA, GCIH, GREM, or offensive security certifications such as OSCP
• Experience supporting federal cybersecurity programs or 24/7 SOC operations
• Familiarity with MITRE ATT&CK framework and threat modeling methodologies
• Experience integrating threat intelligence into detection engineering and SOC operations
• Experience working in cloud and hybrid enterprise environments
• Experience developing automation or scripting solutions to enhance threat hunting capabilities
• Experience mentoring analysts and leading threat hunting teams

Security Clearance:

• Active TS/SCI (or TS with SCI eligibility)

Education:

• Bachelor's degree

Work Schedule:

• Monday-Friday, Hybrid

Compensation and Benefits:

Cydecor offers a comprehensive compensation package including Health and Dental Insurance, Vision and Life Insurance, Short-Term & Long-Term Disability, 401(K) + company match, Paid Time Off (PTO), Paid Company Holidays, Tuition and Professional Development Assistance and more.

What We Believe:

We have an unwavering commitment to diversity with the aim that every one of our people has a full sense of belonging within our organization. As a business imperative, every person at Cydecor has the responsibility to create and sustain an inclusive environment.

Tags: eateCyber Threat Hunting, Threat Hunting, Cybersecurity, SOC, SIEM, EDR, Splunk, Tanium, Threat Intelligence, CTI, MITRE ATT&CK, Threat Detection, Cyber Defense, Intrusion Detection, IDS, Network Security, Endpoint Security, Threat Analysis, Malware Analysis, Indicators of Compromise (IOC), Detection Engineering, Security Analytics, Advanced Persistent Threats (APT), Log Analysis, Security Operations Center, Federal Government, Cleared Jobs, TS/SCI Clearance, DoD 8570, CSSP, Cyber Threats

Equal Employment Opportunity Statement

Cydecor is an Equal Employment Opportunity/Affirmative Action Employer (EEO/AA). All employment and hiring decisions are based on qualifications, merit, and business needs without regard to race, religion, color, sexual orientation, nationality, gender, ethnic origin, disability, age, sex, gender identity & expression, veteran status, marital status, or any other characteristic protected by applicable law.

If you are a qualified individual with a disability and/or a disabled veteran, you may request a reasonable accommodation if you are unable or limited in your ability to access job openings or apply for a job on this site because of your disability. You can request assistance by contacting HR@cydecor.com or calling 703-884-2105.