External Job Posting Title Threat Hunter / Public Trust

Peraton; Warrenton (VA); On-site; USD 86,000 - 138,000; Full time

Job summary

Peraton is seeking a Threat Hunter for Federal Strategic Cyber Mission programs, based in Warrenton, VA. The role involves technical analysis of network traffic to identify anomalies and document findings, monitoring threats, IDS/IPS analysis, and developing detection signatures.

Travel to support exercises or incidents and collaboration with external entities are expected. The candidate will analyze data from partners to understand attacks, assist with mitigation, and participate in

Qualifications

• Bachelor’s degree with 5 years of experience, or 3 years with a Master’s.
• Demonstrated threat hunting or network/cloud forensics experience.
• Proven ability to develop and recommend corrective actions.
• Expertise integrating new architectural analysis of cyber security features.
• Comfortable interfacing with external entities including law enforcement and government agencies.
• U.S. citizenship is required and ability to obtain Public Trust clearance.
• Willingness and ability to travel 10–25%.

Responsibilities

• Conduct technical analysis of network traffic to identify anomalies and document findings.
• Monitor emerging threats and document analysis of vulnerabilities and exploits.
• Monitor IDS/IPS alerts and analyze associated traffic.
• Report incidents to agencies and escalate when needed.
• Develop and test detection signatures and deploy them per SOPs.
• Analyze data from partners and monitoring systems to understand attacks and vulnerabilities.
• Assist with mitigation strategies and provide on-site support during exercises or incidents.
• Identify network-based tactics, techniques, and procedures used by attackers.
• Participate in inter-agency groups and technical briefings.

Skills

Threat hunting

Network forensics

Cloud forensics

Interfacing with external entities

Travel willingness

Education

Bachelor's degree

Master's degree

Tools

Databricks

AI/LLMs

Job description

Responsibilities

Peraton is seeking a Threat Hunter to become part of Federal Strategic Cyber Mission programs.

Location: Warrenton, VA; must be local to the work location.

In this role, you will:

• Conduct technical analysis of network traffic to identify anomalies, which may represent potentially malicious activity, and document the analysis in prescribed formats.

• Monitor and understand emerging threats, and the ability to define the technical vulnerabilities and exploits that could present a threat to government networks, and then perform analysis on the emerging capabilities/exploits, and document the analysis in prescribed formats.
• Monitor IDS/IPS alerts, analyze associated network traffic, and document the analysis in prescribed formats.
• Report detected incidents to agency, work toward resolution, and elevate when required according to SOP.
• Development of detection signatures based on indicators and analysis.
• Testing of detection signatures to determine successful detection and level of false positives.
• Deployment of detection signatures based on SOPs.
• Conduct technical analysis of data from partners, constituents, and monitoring systems to understand the nature of attacks, threats, and vulnerabilities.
• Assist with the development of mitigation strategies.
• Deploy to provide on-site support and assistance in the event of an exercise or cyber incident.
• Identify and document network-based tactics, techniques, and procedures used by an attacker to gain unauthorized system access.
• Participate in inter‑agency sponsored community of interest analysis groups, and technical briefings and exchanges.

Qualifications

Minimum requirements:

• Bachelor’s degree and 5 years of experience, or 3 years of experience with a Master’s.
  • An additional 4 years of experience will be considered in lieu of degree.
• Demonstrated experience in threat hunting or network/cloud forensics.
• Proven ability to develop and recommend corrective actions.
• Expertise, knowledge, and experience integrating new architectural analysis of cyber security features.
• Comfortable interfacing with external entities including law enforcement, intelligence, and other government organizations and agencies.
• U.S. citizenship is required.
• Ability to obtain Public Trust security clearance required.
• Willingness and ability to travel 10–25%.

Preferred:

• Experience using Databricks.
• Experience using Artificial intelligence (AI) and large language models (LLMs).
• Possess one of the following certifications:
  • CCNA‑Security, CND, CySA+, GICSP, GSEC, Security+ CE, or SSCP
• Ability to create, troubleshoot, configure and operate complex scripting solutions with the ability to output the results in a variety of formats (e.g. HTML, XML, etc.) and to re‑purpose the results for reports targeting different technical levels (e.g. other analysts, management, etc.).

Target Salary Range

$86,000 – $138,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual’s experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.

EEO

EEO: Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.