Principal Cyber Threat Hunter - National Security (Onsite)

AT&T; Chantilly (VA); On-site; USD 131,000 - 205,000; Full time

Benefits offered by this job

Medical/Dental/Vision

401(k) plan

Paid Time Off

Parental Leave

Employee discounts

Job summary

AT&T Global Public Sector is seeking a Principal Cybersecurity - Threat Hunter in Chantilly, VA. You will lead threat hunting and investigations, analyze NetFlow/DNS data, and deliver actionable intelligence to a federal customer.

The role blends analytics, engineering collaboration, and customer briefings within a dynamic cybersecurity team. The position requires TS/SCI with polygraph, 3–5 years of related experience, and a Bachelor’s degree or equivalent.

Qualifications

• Bachelor’s degree or equivalent work experience in cybersecurity, CS, IT, data science, or similar field.
• 3–5 years of threat hunting, network security analysis, or related analytics.
• Proactive, hypothesis-driven investigations across large datasets with incomplete information.
• Strong knowledge of TCP/IP, DNS, NetFlow, and network metadata analysis.
• Experience using Splunk or another SIEM to query, correlate, and visualize data.
• Knowledge of attacker behavior, MITRE ATT&CK, and IOCs.
• Excellent written and verbal communication for customer-facing briefs.
• Ability to work independently with cross-functional teams.

Responsibilities

• Lead threat analysis and investigations using NetFlow, DNS, and network telemetry.
• Identify anomalous behavior, high-risk communications, and potential indicators of compromise.
• Manage day-to-day customer mission and occasional presence on customer operations floor.
• Deliver recurring threat briefings and actionable recommendations to customer leadership.
• Develop repeatable threat-hunting tradecraft, playbooks, and analytic workflows.
• Prototype queries and dashboards to improve threat detection and analysis.
• Translate investigative needs into technical requirements for developers and data scientists.
• Mentor analysts and contribute to peer reviews and knowledge sharing.

Skills

Threat hunting

Network security

Splunk/SIEM

Cloud/network metadata

Threat intelligence

Education

Bachelor’s degree or equivalent

Tools

Splunk

Linux

Job description

AT&T Global Public Sector is seeking a Principal Cybersecurity - Threat Hunter in Chantilly, VA. You will lead threat hunting and investigations, analyze NetFlow/DNS data, and deliver actionable intelligence to a federal customer.

The role blends analytics, engineering collaboration, and customer briefings within a dynamic cybersecurity team. The position requires TS/SCI with polygraph, 3–5 years of related experience, and a Bachelor’s degree or equivalent.