Senior Cybersecurity Threat Hunter III

invictusic; Alexandria (VA); On-site; USD 120,000 - 160,000; Full time

Job summary

invictusic in Alexandria, VA seeks a Senior Cybersecurity Threat Hunter III to lead complex, hypothesis-driven hunts and drive detection improvements across enterprise data sources.

The role requires TS/SCI with CI polygraph, DoD 8570 IAT II/IAM II, and hands-on experience in threat hunting, MITRE ATT&CK, and threat intel integration. You will mentor junior analysts and translate findings into defensive actions.

Qualifications

• Bachelor's degree required in a technical discipline; 4 years may substitute for degree
• Six+ years of relevant security experience beyond education
• Hands-on threat hunting and advanced cyber analysis experience
• Strong knowledge of MITRE ATT&CK, TTPs, threat intel applications, and telemetry

Responsibilities

• Lead complex, hypothesis-driven threat hunts across multiple data sources and enclaves
• Analyze security telemetry to identify indicators of compromise and advanced adversary activity
• Correlate data from network, endpoint, identity, SIEM, threat intel, and vulnerabilities
• Document hunt activity, findings, and actions; support incident response
• Develop hunt campaigns based on intelligence, risk, and lessons learned
• Provide guidance to junior analysts and mentor on hunt methodology and evidence validation
• Translate hunt findings into actionable detection and engineering requirements
• Develop reusable hunt playbooks, queries, and training materials
• Mentor staff and support exercises and threat-analysis proficiency

Skills

Threat hunting

Threat analysis

Mentoring analysts

Education

Bachelor's degree in technical discipline

Job description

Title

Senior Cybersecurity Threat Hunter III

Location

Alexandria, VA

Clearance

TS/SCI with the ability to obtain and maintain a CI polygraph

Job Details

• Lead complex, hypothesis-driven threat hunts across multiple enterprise data sources and enclaves to identify sophisticated or previously undetected adversary activity


• Proactively analyze security telemetry to identify indicators of compromise, anomalous behavior, and adversary activity that has not met an incident threshold or has evaded automated security controls


• Assess and correlate data from multiple sources, including network, endpoint, identity, SIEM, threat intelligence, vulnerability, and other available security data


• Document hunt activity, findings, evidence, and recommended follow-on actions in authorized systems and initiate or support incident-response processes when malicious activity is identified


• Provide relevant findings and trends for SOC operational reporting, significant-activity reporting, and defensive awareness


• Develop and prioritize hunt campaigns based on threat intelligence, mission risk, adversary TTPs, detection coverage, incident lessons learned, and environmental changes


• Perform advanced behavioral analysis and identify patterns indicative of persistence, credential abuse, lateral movement, command and control, collection, or other adversary activity


• Serve as an escalation point for junior threat analysts and provide technical guidance on hunt methodology, analytical pivots, and evidence validation


• Translate successful hunt findings into actionable requirements for detection engineering, watch operations, security engineering, and incident response


• Develop reusable hunt playbooks, queries, analytic methods, documentation standards, and training materials


• Mentor junior personnel and support exercises, knowledge sharing, and assessment of threat-analysis proficiency

Requirements

• Bachelor's degree from an accredited institute in a technical discipline applicable to the position; an additional 4 years of may be substituted in lieu of a degree


• Minimum six (6) years of relevant experience in addition to education level


• Significant hands-on experience conducting threat hunting, advanced cyber analysis, or adversary-focused investigations


• Strong knowledge of MITRE ATT&CK, adversary TTPs, threat intelligence application, and network/host/identity security telemetry


• Experience developing hunt hypotheses and converting analytical findings into detection or defensive improvements


• Experience mentoring analysts or leading complex analytical efforts


• Must possess current DoD 8570 IAT II or IAM II certification


• Experience working in a DoD or IC environment


• Current active TS/SCI clearance, with the ability to obtain and maintain a CI polygraph

Equal Opportunity Employer/Veteran/Disabled