Senior Cyber Threat Intelligence & Threat Hunting Lead

cFocus Software Incorporated; Washington (District of Columbia); On-site; USD 180,000 - 230,000; Full time

Job summary

cFocus Software Incorporated is seeking a Cyber Threat Intelligence & Threat Hunting Lead to oversee CTI, detection engineering, and proactive threat hunting operations supporting enterprise cyber defense missions.

The Lead will drive development of intelligence-driven detections, hunt methodologies, adversary tracking, SIEM content engineering, and operational threat-informed defense capabilities. This role partners with SOC leadership to translate threats into actionable defenses.

Qualifications

• 10+ years of cybersecurity operations experience.
• 5+ years supporting CTI, threat hunting, or detection engineering programs.
• Experience with: Splunk, Sentinel, CrowdStrike, EDR telemetry, detection content engineering, and intelligence platforms.
• Strong understanding of: MITRE ATT&CK, adversary tradecraft, malware analysis, and intelligence analysis methodologies.
• Experience developing: SIEM detections, hunt analytics, detection tuning, and operational reporting.

Responsibilities

• Lead CTI, detection engineering, and threat hunting operations.
• Develop intelligence-driven detection and hunt strategies.
• Produce operational and strategic threat intelligence reporting.
• Develop and maintain: SIEM detections, analytics, correlation rules, behavioral detections, and hunt playbooks.
• Conduct hypothesis-based threat hunting aligned to MITRE ATT&CK, adversary TTPs, malware campaigns, and emerging threats.
• Integrate CTI into SOC workflows, detection engineering, and incident response operations.
• Analyze malware trends, adversary infrastructure, campaigns, indicators, and attack patterns.
• Support automation and SOAR integration initiatives.
• Brief executives and technical leadership on emerging threats and operational risk.

Skills

Cybersecurity operations

CTI and threat hunting

Tools

Splunk

Microsoft Sentinel

CrowdStrike

EDR telemetry

detection content engineering

intelligence platforms

Job description

cFocus Software Incorporated is seeking a Cyber Threat Intelligence & Threat Hunting Lead to oversee CTI, detection engineering, and proactive threat hunting operations supporting enterprise cyber defense missions.

The Lead will drive development of intelligence-driven detections, hunt methodologies, adversary tracking, SIEM content engineering, and operational threat-informed defense capabilities. This role partners with SOC leadership to translate threats into actionable defenses.