Cyber Threat Hunt Engineer — Proactive Defender

CACI International Inc.; St. Louis (MO); On-site; USD 75,000 - 158,000; Full time

Job summary

CACI International Inc. is seeking a Cyber Hunt Engineer to support the National Geospatial-Intelligence Agency (NGA). You will hunt for indicators of compromise, assess host, network, and process activity, and operate across multiple data sources to detect intrusions.

This role requires US citizenship and a TS/SCI with polygraph, plus relevant experience or degrees. You will document findings, create reports, and work with threat intel and defense teams to strengthen NGA's cybersecurity posture.

Qualifications

• U.S. citizen with TS/SCI clearance (or ability to obtain with polygraph).
• High school diploma with 10+ years of relevant experience, or a bachelor's degree with 6+ years, or a master's with 4+ years.
• IAT Level III and CSSP Analyst Certification, or CSSP certification within 90 days of start.

Responsibilities

• Proactively search for indicators of compromise and anomalous behavior.
• Conduct host, network, and process analysis on NGA systems.
• Assess data from multiple sources to identify suspicious activity.
• Create reports detailing actions, findings, and recommendations.
• Collaborate with threat intelligence and countermeasure teams to improve security posture.

Skills

Cyber threat hunting

Indicator of compromise analysis

Host/network/process analysis

Incident tracking

Education

High school diploma

Bachelor's degree

Master's degree

Tools

Ticketing system

Job description

CACI International Inc. is seeking a Cyber Hunt Engineer to support the National Geospatial-Intelligence Agency (NGA). You will hunt for indicators of compromise, assess host, network, and process activity, and operate across multiple data sources to detect intrusions.

This role requires US citizenship and a TS/SCI with polygraph, plus relevant experience or degrees. You will document findings, create reports, and work with threat intel and defense teams to strengthen NGA's cybersecurity posture.