Intelligence-Led Cyber Threat Hunter

Peraton; Tampa (FL); On-site; USD 80,000 - 128,000; Full time

Job summary

Peraton is seeking a Cyber Threat Hunter to support SITEC-3 EOM at MacDill AFB, Florida. You will proactively identify, track, and disrupt sophisticated cyber adversaries using CTI, MITRE ATT&CK, and hypothesis-driven hunts across endpoints, networks, and cloud workloads.

Responsibilities include developing proactive hunt campaigns, translating findings into production detections and playbooks, and collaborating with SOC to mature the security posture.

Qualifications

• Must have DoD 8570 IAT II Certification.
• DoW TS/SCI clearance.
• Must be DoW 8140 compliant under the Work Role Code 531.

Responsibilities

• Develop, test, and execute proactive, intelligence-led threat hunt hypotheses.
• Analyze CTI reports and extract adversary TTPs for enterprise-wide use.
• Map hunting activities to the MITRE ATT&CK framework for coverage across kill chain.
• Query and correlate large data sets using Splunk SPL, KQL, SQL across EDR, logs, and network data.
• Translate hunt techniques into durable SIEM/SOAR detection rules and playbooks.
• Produce detailed hunt reports and executive summaries with findings and remediation recommendations.
• Execute end-to-end hunt operations focusing on behavioral queries and anomaly detection.

Skills

Threat hunting

CTI

MITRE ATT&CK

Adversary TTPs

Executive summaries

Education

HS degree

AS/AA

BS/BA

MS/MA

PhD

Tools

Splunk

Microsoft Sentinel

EDR

XDR

SIEM

SOAR

KQL

SQL

Job description

Peraton is seeking a Cyber Threat Hunter to support SITEC-3 EOM at MacDill AFB, Florida. You will proactively identify, track, and disrupt sophisticated cyber adversaries using CTI, MITRE ATT&CK, and hypothesis-driven hunts across endpoints, networks, and cloud workloads.

Responsibilities include developing proactive hunt campaigns, translating findings into production detections and playbooks, and collaborating with SOC to mature the security posture.