Senior Cyber Threat Hunt Lead (Federal)

True Zero Technologies; Washington (District of Columbia); On-site; USD 150,000 - 190,000; Full time

Job summary

True Zero Technologies is seeking a Cyber Hunt Team Lead to oversee proactive threat hunting, detection engineering, and adversary analysis within federal environments. You will direct hunt missions, develop advanced analytics, and coordinate with SOC, CTI, and government teams to mitigate sophisticated cyber threats.

The ideal candidate has 10+ years in cybersecurity with hands-on hunting, strong leadership, and deep knowledge of TTPs, MITRE ATT&CK, and security monitoring across endpoints and

Qualifications

• Minimum 10 years in progressive cybersecurity roles with hands-on threat hunting
• Certifications required: CISSP, GCIH, GCFA, or CEH
• Experience with EDR/NDR, SIEM, MITRE ATT&CK, and adversary emulation
• Proven ability to lead cross-functional security investigations and mentor teams

Responsibilities

• Lead enterprise threat hunting missions and coordinate advanced investigations
• Analyze adversary TTPs, identify compromises, and strengthen defenses
• Collaborate with SOC, CTI, and government stakeholders on detections
• Develop threat hypotheses, detection logic, and monitoring use cases
• Maintain centralized IOC/IOCs and detection methodologies for repeatable investigations
• Lead purple team exercises to assess and improve detection capabilities
• Map techniques to MITRE ATT&CK and guide security improvements

Skills

Threat hunting

Leadership

Security analytics

Collaboration

Adversary emulation

Threat detection

MITRE ATT&CK

Incident investigation

Education

CISSP

GCIH

GCFA

CEH

Tools

EDR

NDR

SIEM

Job description

True Zero Technologies is seeking a Cyber Hunt Team Lead to oversee proactive threat hunting, detection engineering, and adversary analysis within federal environments. You will direct hunt missions, develop advanced analytics, and coordinate with SOC, CTI, and government teams to mitigate sophisticated cyber threats.

The ideal candidate has 10+ years in cybersecurity with hands-on hunting, strong leadership, and deep knowledge of TTPs, MITRE ATT&CK, and security monitoring across endpoints and