Lead Threat Hunter & AI-Driven Security Engineer (Remote)

Lumen; United States; On-site; USD 110,000 - 155,000; Full time

Benefits offered by this job

Health benefits

Life insurance

Remote work

Job summary

Lumen is seeking a Lead Information Security Engineer for Black Lotus Labs to advance threat hunting across our global network. You will investigate evolving threats using Hadoop, Elasticsearch, and AI-enabled tools, while collaborating with researchers, data engineers, and customers.

This remote position requires in-person collaboration at Annapolis Junction, MD as needed and an active TS/SCI with CI Poly clearance.

Qualifications

• Experience in cyber threat hunting and investigations.
• Strong Python scripting and data analysis skills.
• Familiarity with OSINT methods for threat discovery.
• Experience with Unix-based environments and SQL data extraction.

Responsibilities

• Research attacker tools, techniques, and procedures (TTPs) to support automated detection.
• Collaborate with cyber operators and senior researchers to investigate cyber threats.
• Automate investigations with Python, data analysis, and visualization in Jupyter Notebooks and Grafana.
• Build relationships with internal intelligence teams, law enforcement, and external groups.
• Support customer RFIs on incidents and emerging threats with guidance from senior team members.
• Use AI-enabled tools to assist with research, coding, data exploration, documentation, and knowledge discovery while validating outputs.
• Contribute to repeatable workflows that combine analyst expertise, automation, and AI-assisted capabilities to improve investigative efficiency and analytical quality.

Skills

Python

SQL

Unix

Threat hunting

Data analysis

OSINT

AI workflows

Tools

Hadoop

Elasticsearch

Redis

Docker

Grafana

Job description

Lumen is seeking a Lead Information Security Engineer for Black Lotus Labs to advance threat hunting across our global network. You will investigate evolving threats using Hadoop, Elasticsearch, and AI-enabled tools, while collaborating with researchers, data engineers, and customers.

This remote position requires in-person collaboration at Annapolis Junction, MD as needed and an active TS/SCI with CI Poly clearance.