Senior Cybersecurity Threat Hunter III

invictusic; Colorado Springs (CO); On-site; USD 150,000 - 190,000; Full time

Job summary

invictusic seeks a Senior Cybersecurity Threat Hunter III in Colorado Springs to lead complex, hypothesis-driven threat hunts across enterprise data sources and enclaves. You will proactively analyze telemetry for indicators of compromise and correlate data from network, endpoint, identity and SIEM, documenting findings and supporting incident response.

Requires DoD/IC experience, active TS/SCI with CI polygraph, and the ability to mentor junior analysts while developing hunt playbooks and

Qualifications

• Bachelor's degree in a technical discipline; an additional 4 years may substitute for degree
• Minimum six (6) years of relevant experience
• Hands-on threat hunting and advanced cyber analysis
• Knowledge of MITRE ATT&CK, TTPs, threat intel, and telemetry types
• Experience mentoring analysts or leading complex analytical efforts
• Must have DoD 8570 IAT II or IAM II certification
• Experience in a DoD or IC environment
• Current active TS/SCI clearance with ability to obtain CI polygraph

Responsibilities

• Lead complex, hypothesis-driven threat hunts across multiple enterprise data sources and enclaves
• Proactively analyze security telemetry to identify indicators of compromise and adversary activity
• Assess and correlate data from network, endpoint, identity, SIEM, threat intel, vulnerability data
• Document hunt activity, findings, evidence, and recommended actions; support incident response
• Provide findings for SOC reporting and defensive awareness
• Develop and prioritize hunt campaigns based on threat intel and risk
• Mentor junior analysts and share expertise on hunt methodology
• Translate hunt findings into actionable requirements for detection and response
• Develop reusable hunt playbooks, queries, and training materials

Skills

Threat hunting

MITRE ATT&CK knowledge

Mentoring analysts

DoD/IC environment experience

Education

Bachelor's degree or equivalent (technical)

Job description

Title: Senior Cybersecurity Threat Hunter III

Location: Colorado Springs, CO

Clearance: TS/SCI with the ability to obtain and maintain a CI polygraph

Job Details

• Lead complex, hypothesis-driven threat hunts across multiple enterprise data sources and enclaves to identify sophisticated or previously undetected adversary activity
• Proactively analyze security telemetry to identify indicators of compromise, anomalous behavior, and adversary activity that has not met an incident threshold or has evaded automated security controls
• Assess and correlate data from multiple sources, including network, endpoint, identity, SIEM, threat intelligence, vulnerability, and other available security data
• Document hunt activity, findings, evidence, and recommended follow-on actions in authorized systems and initiate or support incident-response processes when malicious activity is identified
• Provide relevant findings and trends for SOC operational reporting, significant-activity reporting, and defensive awareness
• Develop and prioritize hunt campaigns based on threat intelligence, mission risk, adversary TTPs, detection coverage, incident lessons learned, and environmental changes
• Perform advanced behavioral analysis and identify patterns indicative of persistence, credential abuse, lateral movement, command and control, collection, or other adversary activity
• Serve as an escalation point for junior threat analysts and provide technical guidance on hunt methodology, analytical pivots, and evidence validation
• Translate successful hunt findings into actionable requirements for detection engineering, watch operations, security engineering, and incident response
• Develop reusable hunt playbooks, queries, analytic methods, documentation standards, and training materials
• Mentor junior personnel and support exercises, knowledge sharing, and assessment of threat-analysis proficiency

Requirements

• Bachelor's degree from an accredited institute in a technical discipline applicable to the position; an additional 4 years of may be substituted in lieu of a degree
• Minimum six (6) years of relevant experience in addition to education level
• Significant hands-on experience conducting threat hunting, advanced cyber analysis, or adversary-focused investigations
• Strong knowledge of MITRE ATT&CK, adversary TTPs, threat intelligence application, and network/host/identity security telemetry
• Experience developing hunt hypotheses and converting analytical findings into detection or defensive improvements
• Experience mentoring analysts or leading complex analytical efforts
• Must possess current DoD 8570 IAT II or IAM II certification
• Experience working in a DoD or IC environment
• Current active TS/SCI clearance, with the ability to obtain and maintain a CI polygraph

Equal Opportunity Employer/Veteran/Disabled