Cyber Hunt Team Operator — CYBERCOM SOC Operations

SDVOSBNews; Fort Meade (MD); Hybrid; USD 120,000 - 180,000; Full time

Job summary

SDVOSBNews is seeking a Cyber Hunt Team Operator for CYBERCOM SOC Operations at Fort Meade. The role focuses on proactive threat hunting across DODIN-connected networks, identifying adversary TTPs before alarms trigger.

You will develop hunt hypotheses from threat intel, operate across sensors, and document findings to feed finished intelligence. Clear DFIR experience and APT threat exposure are valued.

Qualifications

• DFIR experience is required as a baseline.
• Experience with APT-level threat actors relevant to CYBERCOM's mission set is a differentiator.
• Bachelor's degree in Cybersecurity or Computer Science or equivalent experience is required.

Responsibilities

• Develop hunt hypotheses based on current threat intelligence.
• Execute across sensor platforms and document findings.
• Feed finished intelligence production with clear reporting.

Skills

DFIR experience

Threat hunting

Clearance readiness

Education

Bachelor's degree in Cybersecurity or Computer Science

Job description

Cyber Hunt Team Operator — CYBERCOM SOC Operations

CYBERCOM's SOC recompete includes dedicated hunt team augmentation — proactive threat hunting across DODIN-connected networks, not reactive incident response. This is offensive-minded defensive work: you're looking for adversary TTPs before the alarm triggers.

What You'd Be Doing

Hunt missions are assigned by CYBERCOM's CNMF (Cyber National Mission Force) operations staff. You'll develop hunt hypotheses based on current threat intelligence, execute across available sensor platforms, and document findings in a format that feeds finished intelligence production. DFIR (Digital Forensics and Incident Response) experience is a baseline; experience with APT-level threat actors relevant to CYBERCOM's mission set is the competitive differentiator.

Why Position Yourself Now

Hunt team talent is the tightest cleared specialty in the market. Companies bidding this contract are not waiting for RFP release to build their proposed teams — they are recruiting now. A cleared hunt operator who contacts the BD teams at Peraton or SAIC in Q2 2026 will be named in the proposal, not sourced after award.

Clearance Note

TS/SCI minimum; CI polygraph preferred for some hunt mission roles. GREM, GCFE, or GCFA certifications are weighted positively in the CYBERCOM technical evaluation framework.

Education Requirement

Bachelor's in Cybersecurity, Computer Science, or equivalent experience

Extracted February 25, 2026 · Confidence: 84%