Senior SOC Engineer & Threat Hunting SME

Mitre Corporation; Colorado Springs (CO); On-site; USD 159,000 - 238,000; Full time

Job summary

MITRE’s Defensive Cyber Operations department seeks cybersecurity professionals to join a team of engineers focusing on defensive cyber operations, threat hunting, and AI-enhanced security capabilities for government sponsors. You will work on enterprise SOCs, develop practical training, and apply ATT&CK to strengthen defenses.

Eligible candidates should have extensive operational cybersecurity experience, an advanced degree or equivalent, and the ability to travel up to 25% to customer sites,

Qualifications

• Minimum 8 years of related experience with a BA; or 6 years with MS; or PhD with 3 years. Must have at least 3 years of operational experience.
• Bachelor's degree in Computer Science, Cybersecurity, Data Science, Applied Mathematics, Statistics, or a related field.
• Experience leveraging common SOC tools to defend an enterprise environment.
• Demonstrated experience conducting proactive cyber threat hunting across enterprise environments.
• Experience developing technical training content, curriculum, courseware, or other learning materials for cybersecurity audiences.
• Strong technical writing, presentations, and facilitation skills.
• Ability and willingness to travel up to 25% to deliver training at customer locations, including international locations.
• Must be eligible to obtain and maintain a Top Secret U.S. Government issued Security Clearance; U.S. citizenship required.

Responsibilities

• Provide subject matter expertise to government sponsors on enterprise security operations centers (SOCs), including daily operations, governance, and process improvement.
• Translate complex defensive cybersecurity concepts into practical training tailored to sponsors’ network topologies, staffing, funding, and technical resources.
• Develop hands-on training scenarios and exercises that reflect real-world defensive cyber challenges and sponsor mission needs.
• Apply MITRE ATT&CK to guide threat hunting and develop defenses aligned with adversary tactics, techniques, and procedures (TTPs).
• Design, develop, and refine security detections, analytics, and dashboards, and integrate new data sources into SIEM platforms.
• Develop, evaluate, and improve threat hunting methodologies to identify adversary activity and strengthen defensive cyber capabilities.
• Research and evaluate emerging AI techniques, including machine learning, deep learning, generative AI, and reinforcement learning, with an emphasis on practical applications to SOC operations.
• Assess SOC capabilities, identify operational and technical gaps, and recommend improvements aligned with sponsor priorities.
• Validate detections and defensive workflows through testing and exercises, using results to improve detection coverage and reduce false positives.

Skills

Threat hunting

Technical writing

Presentation skills

Public speaking

Travel readiness

Education

Bachelor's degree in CS / Cybersecurity / Data Science

Tools

Splunk

Elastic/ELK

SIEM platforms

Threat intel platforms

Job description

MITRE’s Defensive Cyber Operations department seeks cybersecurity professionals to join a team of engineers focusing on defensive cyber operations, threat hunting, and AI-enhanced security capabilities for government sponsors. You will work on enterprise SOCs, develop practical training, and apply ATT&CK to strengthen defenses.

Eligible candidates should have extensive operational cybersecurity experience, an advanced degree or equivalent, and the ability to travel up to 25% to customer sites,