Senior Threat Hunter & Detection Engineer (Hybrid)

ECS Corporate Services; Arlington (VA); Hybrid; USD 170,000 - 190,000; Full time

Benefits offered by this job

Top Secret Clearance

Job summary

Everforth ECS in Arlington, VA (Hybrid) seeks a Detection Engineer - Threat Hunter to proactively identify, detect, and mitigate advanced cyber threats across the enterprise. The role blends threat hunting, detection engineering, and security analytics to improve proactive defense across endpoints, networks, and cloud.

Collaboration with SOC, IR, and threat intel teams is essential to mature detection capabilities.

Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or related field, or equivalent experience.
• 7+ years of experience in cybersecurity, with direct experience in Threat Hunting, Detection Engineering, Security Operations, or Incident Response.
• Strong understanding of attacker tactics, techniques, and procedures (TTPs).
• Experience with SIEM platforms and security analytics tools.
• Knowledge of MITRE ATT&CK, Cyber Kill Chain, and threat hunting methodologies.
• Experience analyzing endpoint, network, cloud, and identity-based security telemetry.
• Familiarity with scripting and automation using Python, PowerShell, KQL, or similar languages.

Responsibilities

• Threat Hunting: Conduct proactive hunting across enterprise networks, endpoints, cloud, and applications.
• Detection Engineering: Design, test, and maintain detection content across SIEM, EDR/XDR, and cloud platforms.
• Security Analytics: Analyze large telemetry sets and develop detection metrics and dashboards.
• Incident Response Support: Assist with investigations and post-incident detection improvements.
• Threat Intelligence Integration: Map intelligence to controls and detection opportunities.
• Continuous Improvement: Assess detections for gaps and reduce false positives.

Skills

Threat Hunting

Detection Engineering

Security Operations

Incident Response

MITRE ATT&CK

TTPs

Scripting

Python

PowerShell

KQL

Education

Bachelor's degree in cybersecurity or related field

Tools

SIEM platforms

EDR/XDR

Sigma rules

YARA signatures

Threat Intelligence platforms

Cloud security tools

KQL

Job description

Everforth ECS in Arlington, VA (Hybrid) seeks a Detection Engineer - Threat Hunter to proactively identify, detect, and mitigate advanced cyber threats across the enterprise. The role blends threat hunting, detection engineering, and security analytics to improve proactive defense across endpoints, networks, and cloud.

Collaboration with SOC, IR, and threat intel teams is essential to mature detection capabilities.