Cyber Threat Hunter – TS/SCI | Proactive Defense Analyst

CACI International; St. Louis (MO); On-site; USD 75,000 - 158,000; Full time

Job summary

CAC I International seeks a Cyber Threat Hunter to join NGA-focused defenses. The role conducts host, network and process analysis, hunting for indicators of compromise and anomalous activity, and documents findings for improving security posture. Collaboration with threat intelligence and countermeasure teams is essential to success.

Candidates must hold TS/SCI with polygraph or obtain it within 6 months. Travel is up to 10% locally, with a strong emphasis on proactive incident identification

Qualifications

• U.S. citizen required.
• Current TS/SCI with polygraph or must obtain polygraph within 6 months of start date.
• High school diploma and at least 10 years of relevant experience, bachelor’s degree with at least six years, or master’s degree with at least four years of relevant experience.
• IAT Level III and CSSP Analyst Certification or ability to obtain within 90 days.

Responsibilities

• Proactively search for indicators of compromise and anomalous behavior.
• Work hunt missions independently through completion.
• Assess data from multiple sources to identify suspicious activity.
• Augment identification and tracking of incidents.
• Create, update, and document tickets in the authorized ticketing system.
• Provide input to daily operational reports and weekly status reports.
• Collaborate with cyber threat intelligence and countermeasure teams to improve security posture.
• Conduct host, network, and process analysis.
• Create reports detailing actions, findings, and recommendations.
• Other duties as assigned.

Skills

Security clearance

Polygraph

Education

Education requirements

Tools

IAT Level III Certification

CSSP Analyst Certification

Job description

CAC I International seeks a Cyber Threat Hunter to join NGA-focused defenses. The role conducts host, network and process analysis, hunting for indicators of compromise and anomalous activity, and documents findings for improving security posture. Collaboration with threat intelligence and countermeasure teams is essential to success.

Candidates must hold TS/SCI with polygraph or obtain it within 6 months. Travel is up to 10% locally, with a strong emphasis on proactive incident identification