Senior Cyber Threat Hunter & SOC Lead (TS/SCI)

invictusic; Colorado Springs (CO); On-site; USD 140,000 - 210,000; Full time

Job summary

invictusic is seeking a Cybersecurity Threat Analyst Subject Matter Expert IV to serve as senior technical authority for proactive threat hunting in the SOC at Colorado Springs, CO. You will drive hunt lifecycle development and ensure findings feed incident response and engineering teams.

The role requires 8+ years in threat hunting/adversary analysis, DoD/IC experience, and TS/SCI clearance with CI polygraph. Bachelor's in a technical field and DoD 8570 II certification are required.

Qualifications

• Bachelor’s degree in a technical discipline; 4 years may substitute
• Minimum of eight (8) years of relevant experience
• Expert-level threat hunting and adversary analysis
• Expert knowledge of adversary TTPs, MITRE ATT&CK, threat intelligence operationalization
• Current DoD 8570 IAT II or IAM II certification
• Experience in a DoD or IC environment
• Current TS/SCI clearance with CI polygraph

Responsibilities

• Serve as the senior technical authority for proactive threat hunting and adversary-focused analysis within the SOC
• Lead development of the SOC threat-hunting methodology, hunt lifecycle, prioritization model, documentation standards, quality criteria, and integration with watch operations and engineering
• Proactively search across enterprise network, endpoint, identity, SIEM, and other security telemetry for indicators of compromise and behavioral evidence of malicious activity that has evaded automated detection
• Develop and direct advanced hunt campaigns based on threat intelligence, adversary TTPs, mission priorities, predictive/advanced analytics, environmental changes, incidents, and identified detection gaps
• Assess and validate analytical or predictive models and determine whether identified patterns represent meaningful adversary behavior, benign activity, or require additional collection and analysis
• Lead complex analytical pivots across multiple sources and enclaves and direct expansion of scope when evidence indicates broader adversary activity
• Ensure actionable hunt findings are transitioned to incident response, watch operations, detection engineering, or security engineering with clear evidence and recommended actions
• Provide senior technical input to daily/weekly SOC reporting, leadership briefings, threat assessments, and defensive priorities
• Establish reusable hunt playbooks, analytical techniques, ATT&CK mappings, queries, knowledge repositories, and lessons-learned processes
• Mentor threat analysts at all levels and provide technical leadership for exercises, training, and proficiency development
• Identify telemetry and detection blind spots and work with engineering teams to improve collection, analytics, enrichment, and automated detection coverage

Skills

Threat hunting

Adversary analysis

Cyber defense

MITRE ATT&CK

Threat intelligence

Education

Bachelor's degree in a technical discipline

Tools

SIEM

Threat hunting tooling

DoD/IC experience

DoD 8570 IAT II / IAM II

Job description

invictusic is seeking a Cybersecurity Threat Analyst Subject Matter Expert IV to serve as senior technical authority for proactive threat hunting in the SOC at Colorado Springs, CO. You will drive hunt lifecycle development and ensure findings feed incident response and engineering teams.

The role requires 8+ years in threat hunting/adversary analysis, DoD/IC experience, and TS/SCI clearance with CI polygraph. Bachelor's in a technical field and DoD 8570 II certification are required.