Cyber Threat Hunter — TS/SCI Onsite in Hawaii

The Newberry Group; Honolulu (HI); On-site; USD 115,000 - 150,000; Full time

Benefits offered by this job

Medical, dental, and vision

Paid holidays

Parental leave

Retirement savings accounts

Telecommuting if available

Tuition and training reimbursement

Job summary

The Newberry Group is seeking a Cyber Threat Analyst to join our defensive operations team on the Joint Fires Network. You will conduct threat hunting, develop novel playbooks, and translate adversary tradecraft into detection logic within Elastic Defend SIEM and ELK stack.

You will map MITRE ATT&CK techniques to improve visibility, coordinate containment actions in JIRA, and ensure DIA-aligned TS/SCI reporting while supporting DoD security standards at a SCIF in Hawaii.

Qualifications

• Bachelor’s degree in Cybersecurity, Intelligence, CS, IT, or related field with 2+ years in cyber threat intelligence or SOC ops.
• Level III requires 4+ years in relevant field; multiple paths.
• Active TS/SCI clearance required; DoD 8140 baseline certification.
• Experience with SIEM (Elasticsearch), ATT&CK mapping, JIRA.

Responsibilities

• Advanced Threat Hunting & Novel Playbook Development.
• Novel Playbook Authoring focusing on behavioral anomalies and C2.
• Proactive Hypothesis Hunting using all-source intelligence and SIEM data.
• Routine Threat Containment with standardized playbooks in JIRA.
• MITRE ATT&CK Mapping to identify visibility gaps and improve posture.
• SIEM Detection Tuning with Elastic Defend to reduce false positives.
• DIA-aligned TS/SCI Incident Reporting within mandated windows.
• Incident Handling & Response architecture aligned with enterprise standards.
• CSSP alignment: contribute to DoD CSSP core functions and brief leadership.

Education

Bachelor’s degree in Cybersecurity or related

DoD 8140 / 8570 certification

Tools

ELK Stack

Corelight

Darktrace

JIRA

Elastic Defend

Job description

The Newberry Group is seeking a Cyber Threat Analyst to join our defensive operations team on the Joint Fires Network. You will conduct threat hunting, develop novel playbooks, and translate adversary tradecraft into detection logic within Elastic Defend SIEM and ELK stack.

You will map MITRE ATT&CK techniques to improve visibility, coordinate containment actions in JIRA, and ensure DIA-aligned TS/SCI reporting while supporting DoD security standards at a SCIF in Hawaii.