Cyber Threat Hunter II - TS/SCI Clearance, Proactive Hunts

Invictus International; Alexandria (VA); On-site; USD 120,000 - 160,000; Full time

Job summary

Invictus International is seeking a skilled Threat Hunter in the United States, Virginia, to conduct hypothesis-driven threat hunts across enterprise telemetry and identify malicious activity not caught by automated controls.

You will proactively analyze security telemetry, correlate data from multiple sources, and document findings to support incident response and SOC reporting. A DoD 8570 IAT II/IAM II certification and TS/SCI clearance with CI polygraph are required.

Qualifications

• Bachelor's degree in a technical discipline or 4 years of related substitutions.
• Minimum four years of relevant experience in threat hunting, security analysis, or incident investigation.
• Hands-on threat hunting experience with adversary TTPs and MITRE ATT&CK.
• Current DoD 8570 IAT II or IAM II certification and active TS/SCI clearance with CI polygraph.

Responsibilities

• Independently conduct hypothesis-driven threat hunts across enterprise telemetry.
• Proactively analyze telemetry to identify indicators of compromise and adversary activity.
• Assess and correlate data from network, endpoint, identity, SIEM, and threat intel sources.
• Document hunt activity, findings, and recommended actions in authorized systems.
• Provide findings for SOC reporting and defensive awareness.
• Develop hunt hypotheses from threat intelligence and observed gaps.
• Use MITRE ATT&CK to characterize behavior and guide pivots.
• Identify patterns across users, hosts, and time periods.
• Recommend new detections, data collection, and defensive controls.

Skills

Threat hunting

Incident response

Threat intelligence

MITRE ATT&CK

Education

Bachelor's degree in a technical discipline

Tools

SIEM

Endpoint telemetry

Network telemetry

Job description

Invictus International is seeking a skilled Threat Hunter in the United States, Virginia, to conduct hypothesis-driven threat hunts across enterprise telemetry and identify malicious activity not caught by automated controls.

You will proactively analyze security telemetry, correlate data from multiple sources, and document findings to support incident response and SOC reporting. A DoD 8570 IAT II/IAM II certification and TS/SCI clearance with CI polygraph are required.