Remote Lead Threat Hunter - AI-Driven Security Engineer

Lumen Technologies; Annapolis (MD); Hybrid; USD 116,000 - 155,000; Full time

Benefits offered by this job

Health benefits

Life insurance

Time off / flexible schedule

Job summary

Lumen Technologies' Black Lotus Labs is seeking a Lead Information Security Engineer to advance threat hunting, investigation, and discovery of evolving malicious activity using Lumen’s network visibility, analytic platforms, and approved AI-enabled tools.

This position will work with researchers, data engineers, malware reverse engineers, and customers to support investigations and build automated workflows.

Qualifications

• Active TS/SCI clearance w/ CI poly is required or active clearance in process.
• Experience in cyber threat hunting, security investigations, or anomaly analysis.
• Familiarity with Python scripting and large-scale data analysis concepts.
• Unix-based environment proficiency and SQL familiarity.
• Ability to validate AI-assisted outputs with analytical judgment.

Responsibilities

• Research attacker tools, techniques, and procedures (TTPs) to support automated detection.
• Collaborate with cyber operators and senior researchers on investigations and mitigation guidance.
• Automate investigations via Python, data analysis, and visualization in Jupyter Notebooks and Grafana.
• Build relationships with internal intelligence teams, law enforcement, and external groups.
• Support RFIs on incidents and evolving threats with guidance from senior team members.
• Leverage AI-enabled tools for research, coding, data exploration, documentation, and knowledge discovery with rigorous validation.
• Develop repeatable workflows combining expertise, automation, and AI-assisted capabilities.

Skills

TS/SCI clearance

Python scripting

Unix

SQL

Threat hunting

Data analysis

Education

Bachelor's degree in CS or STEM

Tools

Hadoop ecosystem

Elasticsearch

Redis

Docker Swarm

Grafana

Jupyter Notebooks

Job description

Lumen Technologies' Black Lotus Labs is seeking a Lead Information Security Engineer to advance threat hunting, investigation, and discovery of evolving malicious activity using Lumen’s network visibility, analytic platforms, and approved AI-enabled tools.

This position will work with researchers, data engineers, malware reverse engineers, and customers to support investigations and build automated workflows.