Senior Threat Hunter & AI-Driven Analyst (Remote)

Lumen Technologies; Virginia (MN); On-site; USD 145,000 - 194,000; Full time

Benefits offered by this job

Health benefits

Life insurance

Wellbeing perks

Job summary

Lumen Technologies, through Black Lotus Labs, seeks a Senior Lead Threat Analyst to hunt threats across large networks, develop mission‑relevant intelligence, and drive AI‑assisted research. The role collaborates with researchers, data engineers, malware analysts, and customers on advanced security projects.

The position requires an active TS/SCI clearance with CI Poly. It offers a remote work model with occasional visits to the Herndon, VA area, and opportunities to integrate Hadoop, Spark,

Qualifications

• Active TS/SCI security clearance w/ CI Poly required.
• Experience automating investigations and building repeatable workflows.
• Strong written and verbal communication for cross‑functional teams.

Responsibilities

• Research latest threat attacker tools, techniques, and procedures (TTPs) to automate detection.
• Conduct in‑depth investigations on cyber threat activity and provide mitigation guidance.
• Automate investigations through Python scripting and data analysis using notebooks and Grafana.
• Build and maintain trust with intelligence teams, law enforcement, and outside groups.
• Support customer RFIs on incidents and emerging threats.
• Use AI‑enabled tools to accelerate research, coding, data exploration, and knowledge discovery.
• Develop repeatable workflows combining analyst expertise, automation, and AI capabilities.

Skills

Python scripting

Data analysis

Unix/Linux

OSINT methods

SQL

Threat hunting

AI‑assisted tools

Grafana

Jupyter Notebooks

Spark

Docker

Hadoop

Tools

Docker Swarm

Hadoop

Spark

Kafka

AirFlow

Elasticsearch

Redis

Job description

Lumen Technologies, through Black Lotus Labs, seeks a Senior Lead Threat Analyst to hunt threats across large networks, develop mission‑relevant intelligence, and drive AI‑assisted research. The role collaborates with researchers, data engineers, malware analysts, and customers on advanced security projects.

The position requires an active TS/SCI clearance with CI Poly. It offers a remote work model with occasional visits to the Herndon, VA area, and opportunities to integrate Hadoop, Spark,