Cyber Hunt Team Leader (R-00256)

True Zero Technologies; Washington (District of Columbia); On-site; USD 180,000 - 240,000; Full time

Job summary

True Zero Technologies seeks an experienced Cyber Hunt Team Lead to oversee proactive threat hunting, detection, and adversary analysis in complex federal environments. The role directs threat hunting missions, develops detection methods, and coordinates with SOC, CTI, and government teams to identify and mitigate advanced cyber threats.

The ideal candidate brings extensive hands-on cybersecurity experience, strong technical leadership, and deep knowledge of TTPs, endpoint and network security

Qualifications

• 10+ years in cybersecurity with threat hunting and security monitoring experience.
• Must have hands-on experience with EDR/NDR and SIEM platforms.
• Knowledge of MITRE ATT&CK and adversary emulation techniques.
• Strong leadership and cross-functional collaboration skills.

Responsibilities

• Lead enterprise threat hunting missions and coordinate with SOC/CTI and government teams.
• Develop hypotheses, detection logic, and monitoring use cases for endpoints and network.
• Analyze adversary behaviors, TTPs, and emerging threats to strengthen defenses.
• Coordinate investigations and share intelligence to validate findings and guide mitigations.

Skills

Threat hunting

Cybersecurity leadership

MITRE ATT&CK

Endpoint security

Security analytics

Tools

EDR

NDR

SIEM

Threat intel platforms

Job description

True Zero Technologies, a veteran-owned small business, was founded on the principle that the purposeful enablement of people and technology in an organization directly ties to the quality of its outcomes. True Zero recognizes that those outcomes begin and end with our people, and that is what we have built a community of like-minded, driven, and passionate individuals and innovators who are aligned in a common goal of delivering top-tier services to our customers. Our culture and commitment have been recognized through numerous accolades, including being named one of the Best Places to Work in 2023 in two categories(“Prosperous and Thriving” ($5MM–$50MM in gross revenue) and “Mid-Atlantic Region”(DC, DE, MD, NC, VA, WV)), and again in 2025 as a Best Places to Work honoree. In addition, True Zero earned coveted spots on the Inc. 5000 list of fastest-growing companies in America in 2022, 2023, and 2025 , a testament to our sustained growth driven by our people-first approach and unwavering dedication to excellence.

Position Overview

True Zero Technologies is seeking an experienced Cyber Hunt Team Lead to oversee proactive threat hunting operations, advanced threat detection, and adversary analysis within complex federal environments. This leadership position is responsible for directing threat hunting missions, developing sophisticated detection methodologies, and coordinating with Security Operations Center (SOC), Cyber Threat Intelligence (CTI), and government teams to identify, investigate, and mitigate advanced cyber threats. The ideal candidate will possess extensive hands-on cybersecurity experience, strong technical leadership capabilities, and deep expertise in threat hunting, endpoint and network security monitoring, adversary tactics, techniques, and procedures (TTPs), and advanced threat detection engineering.

Job Responsibilities

• Proactive Threat Hunting & Team Leadership: Lead and coordinate enterprise threat hunting missions, directing proactive investigations, advanced security analytics, and hypothesis-driven hunting activities to identify sophisticated cyber threats and previously undetected malicious activity across federal systems.
• Advanced Threat Detection & Adversary Analysis: Analyze adversary behaviors, attack patterns, and emerging threats, including advanced persistent threats (APTs), to identify potential compromises, uncover security weaknesses, and develop actionable recommendations to strengthen enterprise defenses.
• Cross-Functional Security Collaboration: Coordinate with SOC analysts, Cyber Threat Intelligence (CTI) teams, cybersecurity business partners, and government stakeholders to investigate threats, share intelligence, validate findings, and support coordinated detection and mitigation efforts.
• Threat Hypothesis Development & Detection Engineering: Develop and refine threat hunting hypotheses, behavioral analytics, detection logic, and security monitoring use cases to improve the identification of malicious activity across endpoint, network, and enterprise security environments.
• Threat Intelligence & Indicator Management: Establish and maintain a centralized knowledge base of indicators of compromise (IOCs), adversary TTPs, threat hunting findings, and detection methodologies to support repeatable investigations, intelligence sharing, and continuous improvement of security operations.
• Purple Team Exercises & Threat Emulation: Support and lead collaborative Purple Team exercises and adversary emulation activities to assess security detection capabilities, simulate realistic attack techniques, identify monitoring gaps, and recommend enhancements to defensive controls.
• Security Framework Alignment & Continuous Improvement: Leverage MITRE ATT&CK and recognized threat hunting methodologies to map adversary techniques, evaluate detection coverage, improve hunting procedures, and provide technical guidance and mentorship to threat hunting and security operations personnel.

Job Requirements

• Cybersecurity & Threat Hunting Experience: Minimum of 10 years of progressive cybersecurity experience, including hands-on threat hunting, security monitoring, incident investigation, threat detection, or related defensive security disciplines within complex enterprise environments.
• Professional Certifications: Must possess at least one of the following certifications: Certified Information Systems Security Professional (CISSP), GIAC Certified Incident Handler (GCIH), GIAC Certified Forensic Analyst (GCFA), or Certified Ethical Hacker (CEH).
• Threat Detection Technologies & Security Frameworks: Demonstrated hands-on experience with Endpoint Detection and Response (EDR), Network Detection and Response (NDR), Security Information and Event Management (SIEM) platforms, MITRE ATT&CK, and adversary emulation techniques, including developing and executing advanced threat hunting methodologies.
• Operating Systems, Networking & Adversary Techniques: Strong technical understanding of Windows and Linux operating systems, enterprise networking, network protocols, endpoint security, and adversary tactics, techniques, and procedures (TTPs), with the ability to analyze sophisticated attack activity across enterprise infrastructure.
• Technical Leadership & Threat Intelligence Collaboration: Proven ability to lead threat hunting initiatives, develop threat hypotheses and detection logic, coordinate complex security investigations, and collaborate with SOC, CTI, engineering, and government stakeholders to identify, assess, and mitigate advanced cybersecurity threats.
• Security Clearance: Required to meet requirements for High Risk/ Public Trust Contractor Positions.

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.