Senior Incident Response Lead & Threat Hunter

Peraton; United States; On-site; USD 104,000 - 166,000; Full time

Job summary

Peraton is seeking a Senior Incident Response Analyst to lead hands-on incident response for high‑risk California environments, owning detection engineering and threat hunting. You will drive end-to-end response, playbooks, and on-call coordination with client security teams and our Security Services Manager.

You will develop and exercise playbooks, tune SIEM/SOAR content, and conduct threat hunting aligned to MITRE ATT&CK.

Qualifications

• Bachelor's degree in cybersecurity or computer science, or 4 years of related experience.
• 8+ years of cybersecurity experience with hands-on incident response leadership.
• Active GCIH or GCIA certification.
• Hands-on experience with SIEM and SOAR platforms including detection engineering, log onboarding, and alert tuning.
• Threat hunting using MITRE ATT&CK, malware triage and network/host forensics.
• Experience leading incidents as incident lead with evidence handling and post-incident reporting.
• Knowledge of NIST SP 800-61 incident handling and ability to script for automation.
• US Citizenship and ability to pass a California background clearance.

Responsibilities

• Lead incident response end to end including triage, containment, eradication, recovery, and post-incident review.
• Build and exercise incident response playbooks and runbooks.
• Own detection and monitoring: SIEM/SOAR content development, log onboarding, alert tuning.
• Hunt threats mapped to MITRE ATT&CK and convert findings into durable detections.
• Run defensible investigations with evidence handling and reporting.
• Meet contract obligations for tight notification timelines and breach reporting.
• Provide incident status reports to leadership and support vulnerability management.

Skills

Incident response leadership

GCIH/GCIA certification

MITRE ATT&CK threat hunting

Evidence handling / chain of custody

NIST SP 800-61 knowledge

Education

Bachelor's degree in cybersecurity or computer science

Tools

Splunk

Microsoft Sentinel

Job description

Peraton is seeking a Senior Incident Response Analyst to lead hands-on incident response for high‑risk California environments, owning detection engineering and threat hunting. You will drive end-to-end response, playbooks, and on-call coordination with client security teams and our Security Services Manager.

You will develop and exercise playbooks, tune SIEM/SOAR content, and conduct threat hunting aligned to MITRE ATT&CK.