Cyber Threat Hunter — TS/SCI, Onsite in Hawaii

The Newberry Group; Waipahu (HI); On-site; USD 120,000 - 160,000; Full time

Benefits offered by this job

Medical coverage

Relocation reimbursement

Tuition and training reimbursement

Paid time off

Job summary

Newberry Group seeks a Cyber Threat Analyst to support the Joint Fires Network SOC, analyzing network telemetry and advanced sensor feeds to hunt threats and develop novel playbooks. You will map adversary TTPs to MITRE ATT&CK, tune detections in Elastic Defend, and draft incident responses within secure SCIF environments.

The role requires TS/SCI-level eligibility, DoD 8140 baseline certification, and experience with Corelight or Darktrace.

Qualifications

• Bachelor’s degree in a technical field plus 2+ years in cyber threat intelligence, threat hunting, or SOC operations, or equivalent experience.
• DoD 8140/ DCWF-based certification required prior to hire.
• Experience with SIEMs and network telemetry analysis required.

Responsibilities

• Develop novel threat hunting playbooks focused on behavioral anomalies and C2 patterns.
• Analyze network telemetry and logs to detect and contain threats across multiple nodes.
• Tune SIEM queries (ELK) and correlate alerts to reduce false positives.
• Prepare threat intelligence summaries and brief leadership on incidents and adversary activity.

Skills

Threat hunting

Threat intelligence

Incident response coordination

MITRE ATT&CK mapping

SIEM tuning

Education

Bachelor’s degree in Cybersecurity/Intelligence/CS/IT

DoD 8140/8570 baseline certification

Tools

Elasticsearch/ELK

Logstash

Kibana

Elastic Defend

Corelight

Darktrace MDR

JIRA

Job description

Newberry Group seeks a Cyber Threat Analyst to support the Joint Fires Network SOC, analyzing network telemetry and advanced sensor feeds to hunt threats and develop novel playbooks. You will map adversary TTPs to MITRE ATT&CK, tune detections in Elastic Defend, and draft incident responses within secure SCIF environments.

The role requires TS/SCI-level eligibility, DoD 8140 baseline certification, and experience with Corelight or Darktrace.