Senior Cybersecurity Threat Hunter III

Invictus International Consulting, LLC.; Alexandria (VA); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Equal Opportunity Employer

Job summary

Invictus International Consulting, LLC. seeks a Senior Cybersecurity Threat Hunter III to lead hypothesis-driven threat hunts across diverse data sources and enclaves, translating findings into actionable detection improvements and incident-response actions.

You will apply MITRE ATT&CK knowledge, analyze telemetry for indicators of compromise, mentor junior analysts, and develop reusable hunt playbooks while engaging with SOC and security engineering teams. TS/SCI with CI poly required.

Qualifications

• Bachelor's degree in a technical discipline is required or equivalent experience.
• Six (6) years of relevant experience beyond education.
• Hands-on threat hunting, advanced cyber analysis, or adversary-focused investigations.
• Strong knowledge of MITRE ATT&CK, TTPs, threat intelligence, and telemetry.
• Experience mentoring analysts or leading complex analytical efforts.
• DoD 8570 IAT II or IAM II certification is required.
• Active TS/SCI clearance with ability to obtain/maintain CI polygraph.

Responsibilities

• Lead complex, hypothesis-driven threat hunts across multiple data sources and enclaves.
• Analyze security telemetry to identify indicators of compromise and adversary activity.
• Assess and correlate data from network, endpoint, identity, SIEM, threat intel, and other sources.
• Document hunt activity, findings, and actions; support incident response when needed.
• Provide findings for SOC reporting and defense awareness; develop hunt campaigns and playbooks.
• Mentor junior analysts and translate hunt findings into detection engineering requirements.

Skills

Threat hunting

MITRE ATT&CK

Mentoring

DoD 8570 IAM II

Security telemetry

Adversary TTPs

Education

Bachelor's degree in a technical discipline

Job description

Title: Senior Cybersecurity Threat Hunter III

Location: Alexandria, VA

Clearance: TS/SCI with the ability to obtain and maintain a CI polygraph

Job Details

• Lead complex, hypothesis-driven threat hunts across multiple enterprise data sources and enclaves to identify sophisticated or previously undetected adversary activity
• Proactively analyze security telemetry to identify indicators of compromise, anomalous behavior, and adversary activity that has not met an incident threshold or has evaded automated security controls
• Assess and correlate data from multiple sources, including network, endpoint, identity, SIEM, threat intelligence, vulnerability, and other available security data
• Document hunt activity, findings, evidence, and recommended follow-on actions in authorized systems and initiate or support incident-response processes when malicious activity is identified
• Provide relevant findings and trends for SOC operational reporting, significant-activity reporting, and defensive awareness
• Develop and prioritize hunt campaigns based on threat intelligence, mission risk, adversary TTPs, detection coverage, incident lessons learned, and environmental changes
• Perform advanced behavioral analysis and identify patterns indicative of persistence, credential abuse, lateral movement, command and control, collection, or other adversary activity
• Serve as an escalation point for junior threat analysts and provide technical guidance on hunt methodology, analytical pivots, and evidence validation
• Translate successful hunt findings into actionable requirements for detection engineering, watch operations, security engineering, and incident response
• Develop reusable hunt playbooks, queries, analytic methods, documentation standards, and training materials
• Mentor junior personnel and support exercises, knowledge sharing, and assessment of threat-analysis proficiency

Requirements

• Bachelor's degree from an accredited institute in a technical discipline applicable to the position; an additional 4 years of may be substituted in lieu of a degree
• Minimum six (6) years of relevant experience in addition to education level
• Significant hands-on experience conducting threat hunting, advanced cyber analysis, or adversary-focused investigations
• Strong knowledge of MITRE ATT&CK, adversary TTPs, threat intelligence application, and network/host/identity security telemetry
• Experience developing hunt hypotheses and converting analytical findings into detection or defensive improvements
• Experience mentoring analysts or leading complex analytical efforts
• Must possess current DoD 8570 IAT II or IAM II certification
• Experience working in a DoD or IC environment
• Current active TS/SCI clearance, with the ability to obtain and maintain a CI polygraph

Equal Opportunity Employer/Veteran/Disabled