OT/ICS Threat Hunt Specialist

Peraton; Denver (CO); On-site; USD 135,000 - 216,000; Full time

Job summary

Peraton seeks an OT Threat Hunt Analyst to support critical infrastructure security operations through intelligence-driven threat hunts, advanced host/network analysis, and detection development across OT and enterprise environments.

The role relies on multi-source cyber threat intelligence, adversary behavior analysis, and cloud platforms to identify, characterize, and mitigate threats affecting transmission, generation, and control centers.

Qualifications

• Active TS/SCI with the ability to obtain a Q//SCI.
• Experience in cyber threat hunting, cyber intelligence, digital forensics, or OT/ICS security operations.
• Extensive experience with OT/ICS environments within critical infrastructure sectors.
• Proficiency with SIEM, detection, and forensic platforms: Elastic, Splunk, FTK, Wireshark, IBM Analyst’s Notebook.
• Cloud experience using AWS and Microsoft Azure.
• Working knowledge of MITRE ATT&CK, IC S Cyber Kill Chain, and modern detection engineering.

Responsibilities

• Lead and support threat hunt operations within OT environments, including substations and control centers.
• Perform in-depth host and network log analysis using SIEMs and forensic tools.
• Translate threat intelligence into detection opportunities and mitigations.
• Develop threat hunt packages, methodologies, and documentation.
• Engineer, test, and deploy sensor architectures in OT/ICS environments.
• Produce analytic reports and executive briefings with findings and risks.
• Collaborate with intelligence community partners and enterprise defenders.

Skills

Threat hunting

Cyber intelligence

Digital forensics

OT/ICS security

MITRE ATT&CK

Adversary techniques

Education

Bachelors or Masters in Cybersecurity Technology or related degree

GCFA

GCIH

GCDA

Tools

Elastic

Splunk

FTK

Wireshark

IBM Analyst’s Notebook

Malcolm

Job description

Peraton seeks an OT Threat Hunt Analyst to support critical infrastructure security operations through intelligence-driven threat hunts, advanced host/network analysis, and detection development across OT and enterprise environments.

The role relies on multi-source cyber threat intelligence, adversary behavior analysis, and cloud platforms to identify, characterize, and mitigate threats affecting transmission, generation, and control centers.