Hybrid Cyber Threat Hunter: Proactive Defense & Hunting

Koitecc Solutions; Washington (District of Columbia); Hybrid; USD 107,900 - 195,050; Full time

Benefits offered by this job

Health and Wellness programs

Income protection

Paid leave

Retirement

Job summary

Leidos is seeking a Cyber Threat Hunter to support a DCO team in Washington, DC. This hybrid role is primarily on-site with up to 20% telework, supporting 24/7 coverage across shifts.

You will craft hypothesis-driven hunts, analyze telemetry, and translate findings into automated detections and countermeasures for federal networks. The role requires DoD 8570 IAT Level II/III and CSSP certifications, a CSSP Infrastructure credential, and TS/SCI clearance.

Qualifications

• Bachelor's degree or higher in a relevant field is required.
• IAT Level II/III and CSSP Analyst certifications or equivalent must be obtained within 180 days of start.
• CSSP Infrastructure certification or equivalent must be obtained within 180 days.
• TS/SCI clearance is required or must be pursued.
• Experience with DoD and cyber threat hunting is preferred.

Responsibilities

• Hypothesis-driven hunting across hybrid-cloud environments.
• Query and correlate telemetry to identify low-and-slow attacks.
• Transform hunt discoveries into high-fidelity SIEM/EDR detections.
• Design automation scripts to scale countermeasures in real time.
• Leverage MITRE ATT&CK to hunt for APT activity and indicators.
• Analyze telemetry to spot early warnings of compromise.
• Author detailed hunt reports with operational improvements.
• Maintain awareness of threat landscape and vulnerability exploitation.

Skills

Threat hunting

Network security

Analytical thinking

Cyber forensics

Education

Bachelor's degree in CS/IS

DoD 8570 IAT Level II/III

CSSP Analyst certification

CSSP Infrastructure certification

TS/SCI clearance

Tools

Splunk SPL

KQL

Elastic DSL

Python

PowerShell

Job description

Leidos is seeking a Cyber Threat Hunter to support a DCO team in Washington, DC. This hybrid role is primarily on-site with up to 20% telework, supporting 24/7 coverage across shifts.

You will craft hypothesis-driven hunts, analyze telemetry, and translate findings into automated detections and countermeasures for federal networks. The role requires DoD 8570 IAT Level II/III and CSSP certifications, a CSSP Infrastructure credential, and TS/SCI clearance.