Senior Incident Response Lead & Threat Hunter

Peraton; Reston (VA); On-site; USD 104,000 - 166,000; Full time

Job summary

Peraton Labs is seeking a Senior Incident Response Analyst to lead hands-on incident response for high-profile environments, own detection engineering and threat hunting, and serve as backup incident manager in coordination with the client team. You will manage the on-call rotation and collaborate with security leadership to protect sensitive data, including PII and PHI.

The role emphasizes developing playbooks, driving SIEM/SOAR improvements, and ensuring timely reporting within contractual and

Qualifications

• 8+ years of cybersecurity experience with hands-on incident response leadership.
• Active GCIH or GCIA certification.
• Hands-on experience with enterprise SIEM and SOAR platforms (e.g., Splunk or Microsoft Sentinel).
• Demonstrated threat hunting experience using MITRE ATT&CK, plus malware triage and network/host forensics fundamentals.
• Experience leading incidents as the incident lead or commander, including evidence handling and post-incident reporting.
• Knowledge of NIST SP 800-61 with scripting for response and detection automation.

Responsibilities

• Lead end-to-end incident response, including triage, containment, eradication, recovery, and post-incident review.
• Develop and exercise incident response playbooks and runbooks using tabletop and drills.
• Own detection and monitoring through SIEM/SOAR content development and log onboarding.
• Conduct threat hunting mapped to MITRE ATT&CK and convert findings into durable detections.
• Coordinate investigations, handle evidence, and produce post-incident reports and lessons learned.
• Meet tight notification obligations and support incident reporting to leadership.
• Support vulnerability management and logging and monitoring coordination.

Skills

Incident response leadership

Threat hunting

Scripting ability

Executive communication

Education

Bachelor's degree in cybersecurity or computer science

GCIH or GCIA certification

Tools

Splunk

Microsoft Sentinel

SIEM

SOAR

Job description

Peraton Labs is seeking a Senior Incident Response Analyst to lead hands-on incident response for high-profile environments, own detection engineering and threat hunting, and serve as backup incident manager in coordination with the client team. You will manage the on-call rotation and collaborate with security leadership to protect sensitive data, including PII and PHI.

The role emphasizes developing playbooks, driving SIEM/SOAR improvements, and ensuring timely reporting within contractual and