Cyber Hunt Team Leader (R-00256)

True Zero Technologies; Washington (District of Columbia); On-site; USD 150,000 - 190,000; Full time

Job summary

True Zero Technologies is seeking a Cyber Hunt Team Lead to oversee proactive threat hunting, detection engineering, and adversary analysis within federal environments. You will direct hunt missions, develop advanced analytics, and coordinate with SOC, CTI, and government teams to mitigate sophisticated cyber threats.

The ideal candidate has 10+ years in cybersecurity with hands-on hunting, strong leadership, and deep knowledge of TTPs, MITRE ATT&CK, and security monitoring across endpoints and

Qualifications

• Minimum 10 years in progressive cybersecurity roles with hands-on threat hunting
• Certifications required: CISSP, GCIH, GCFA, or CEH
• Experience with EDR/NDR, SIEM, MITRE ATT&CK, and adversary emulation
• Proven ability to lead cross-functional security investigations and mentor teams

Responsibilities

• Lead enterprise threat hunting missions and coordinate advanced investigations
• Analyze adversary TTPs, identify compromises, and strengthen defenses
• Collaborate with SOC, CTI, and government stakeholders on detections
• Develop threat hypotheses, detection logic, and monitoring use cases
• Maintain centralized IOC/IOCs and detection methodologies for repeatable investigations
• Lead purple team exercises to assess and improve detection capabilities
• Map techniques to MITRE ATT&CK and guide security improvements

Skills

Threat hunting

Leadership

Security analytics

Collaboration

Adversary emulation

Threat detection

MITRE ATT&CK

Incident investigation

Education

CISSP

GCIH

GCFA

CEH

Tools

EDR

NDR

SIEM

Job description

True Zero Technologies, a veteran-owned small business, was founded on the principle that the purposeful enablement of people and technology in an organization directly ties to the quality of its outcomes. True Zero recognizes that those outcomes begin and end with our people, and that is what we have built a community of like-minded, driven, and passionate individuals and innovators who are aligned in a common goal of delivering top-tier services to our customers. Our culture and commitment have been recognized through numerous accolades, including being named one of the Best Places to Work in 2023 in two categories (“Prosperous and Thriving” ($5MM–$50MM in gross revenue) and “Mid-Atlantic Region” (DC, DE, MD, NC, VA, WV)), and again in 2025 as a Best Places to Work honoree. In addition, True Zero earned coveted spots on the Inc. 5000 list of fastest-growing companies in America in 2022, 2023, and 2025, a testament to our sustained growth driven by our people-first approach and unwavering dedication to excellence.

Position Overview

True Zero Technologies is seeking an experienced Cyber Hunt Team Lead to oversee proactive threat hunting operations, advanced threat detection, and adversary analysis within complex federal environments. This leadership position is responsible for directing threat hunting missions, developing sophisticated detection methodologies, and coordinating with Security Operations Center (SOC), Cyber Threat Intelligence (CTI), and government teams to identify, investigate, and mitigate advanced cyber threats.

The ideal candidate will possess extensive hands-on cybersecurity experience, strong technical leadership capabilities, and deep expertise in threat hunting, endpoint and network security monitoring, adversary tactics, techniques, and procedures (TTPs), and advanced threat detection engineering.

Job Responsibilities

• Proactive Threat Hunting & Team Leadership:Lead and coordinate enterprise threat hunting missions, directing proactive investigations, advanced security analytics, and hypothesis-driven hunting activities to identify sophisticated cyber threats and previously undetected malicious activity across federal systems.
• Advanced Threat Detection & Adversary Analysis:Analyze adversary behaviors, attack patterns, and emerging threats, including advanced persistent threats (APTs), to identify potential compromises, uncover security weaknesses, and develop actionable recommendations to strengthen enterprise defenses.
• Cross-Functional Security Collaboration:Coordinate with SOC analysts, Cyber Threat Intelligence (CTI) teams, cybersecurity business partners, and government stakeholders to investigate threats, share intelligence, validate findings, and support coordinated detection and mitigation efforts.
• Threat Hypothesis Development & Detection Engineering:Develop and refine threat hunting hypotheses, behavioral analytics, detection logic, and security monitoring use cases to improve the identification of malicious activity across endpoint, network, and enterprise security environments.
• Threat Intelligence & Indicator Management:Establish and maintain a centralized knowledge base of indicators of compromise (IOCs), adversary TTPs, threat hunting findings, and detection methodologies to support repeatable investigations, intelligence sharing, and continuous improvement of security operations.
• Purple Team Exercises & Threat Emulation:Support and lead collaborative Purple Team exercises and adversary emulation activities to assess security detection capabilities, simulate realistic attack techniques, identify monitoring gaps, and recommend enhancements to defensive controls.
• Security Framework Alignment & Continuous Improvement:Leverage MITRE ATT&CK and recognized threat hunting methodologies to map adversary techniques, evaluate detection coverage, improve hunting procedures, and provide technical guidance and mentorship to threat hunting and security operations personnel.

Job Requirements

• Cybersecurity & Threat Hunting Experience:Minimum of 10 years of progressive cybersecurity experience, including hands-on threat hunting, security monitoring, incident investigation, threat detection, or related defensive security disciplines within complex enterprise environments.
• Professional Certifications:Must possess at least one of the following certifications: Certified Information Systems Security Professional (CISSP), GIAC Certified Incident Handler (GCIH), GIAC Certified Forensic Analyst (GCFA), or Certified Ethical Hacker (CEH).
• Threat Detection Technologies & Security Frameworks:Demonstrated hands-on experience with Endpoint Detection and Response (EDR), Network Detection and Response (NDR), Security Information and Event Management (SIEM) platforms, MITRE ATT&CK, and adversary emulation techniques, including developing and executing advanced threat hunting methodologies.
• Operating Systems, Networking & Adversary Techniques:Strong technical understanding of Windows and Linux operating systems, enterprise networking, network protocols, endpoint security, and adversary tactics, techniques, and procedures (TTPs), with the ability to analyze sophisticated attack activity across enterprise infrastructure.
• Technical Leadership & Threat Intelligence Collaboration:Proven ability to lead threat hunting initiatives, develop threat hypotheses and detection logic, coordinate complex security investigations, and collaborate with SOC, CTI, engineering, and government stakeholders to identify, assess, and mitigate advanced cybersecurity threats.
• Security Clearance: Required to meet requirements for High Risk/ Public Trust Contractor Positions.