Senior Threat Hunter: DoD Cyber Defense & CTI Ops

Strategic Operational Solutions, Inc; Fort Bragg (CA); On-site; USD 120,000 - 165,000; Full time

Job summary

Strategic Operational Solutions (STOPSO) seeks a Threat Hunter to support USARC's DCOMSS program at Fort Bragg, NC. You will hunt adversaries using hypothesis-driven methods, analyze telemetry, and develop detections to support Blue Team and CTI operations.

Candidate must have DoD cyber qualifications and TS/SCI clearance, with strong experience in SIEM/EDR, CTI, and incident response. On-site duties and potential travel are involved; STOPSO is an Equal Opportunity Employer.

Qualifications

• 3+ years of documented relevant threat hunting, intrusion analysis, or CTI integration experience.
• Proficiency with DoD cyber workforce framework qualifications and relevant certifications.
• Experience with DoD or enterprise IT environments and mission tooling is preferred.

Responsibilities

• Develop hunt hypotheses from adversary tactics, intelligence, indicators, and telemetry gaps.
• Search SIEM, EDR, NetFlow, packet data, host telemetry for complex intrusion activity.
• Analyze findings, distinguish threats from benign activity, and escalate for incident response.
• Develop and validate correlation rules, signatures, and host-based detections with stakeholders.
• Document hunt objectives, methods, data sources, evidence, and gaps.
• Coordinate indicator packages and lessons learned with CTI and Blue Team.
• Perform other duties as assigned consistent with responsibilities and clearance.

Skills

Threat hunting

Intrusion analysis

MITRE ATT&CK

Cyber threat intelligence

Detection engineering

SIEM

EDR

NetFlow

Packet capture

YARA

Snort

Suricata

Education

DCWF 511 Advanced

DCWF 171 Intermediate

DoDM 8140.03 qualification requirements

Tools

SIEM

EDR

NetFlow

Packet capture

YARA

Snort

Suricata

Job description

Strategic Operational Solutions (STOPSO) seeks a Threat Hunter to support USARC's DCOMSS program at Fort Bragg, NC. You will hunt adversaries using hypothesis-driven methods, analyze telemetry, and develop detections to support Blue Team and CTI operations.

Candidate must have DoD cyber qualifications and TS/SCI clearance, with strong experience in SIEM/EDR, CTI, and incident response. On-site duties and potential travel are involved; STOPSO is an Equal Opportunity Employer.