Senior Threat Hunter – Government (TS/SCI + Poly)

VulnU; Chantilly (VA); On-site; USD 131,000 - 205,000; Full time

Benefits offered by this job

Paid parental leave

23 days PTO

Learning budget

Medical/Dental/Vision coverage

401(k) plan

Tuition reimbursement

Paid Time Off and Holidays

Adoption Reimbursement

Job summary

AT&T Public Sector is seeking a Principal Cybersecurity - Threat Hunter to lead threat hunting for a Federal National Security customer. The role involves proactive investigations of large-scale network metadata, developing hypotheses, and delivering clear, actionable intelligence to customer leadership.

The position is onsite in Chantilly, VA, requiring TS/SCI with polygraph. Expect collaboration with data scientists, engineers, and security teams to advance hunting tradecraft and tooling.

Qualifications

• Bachelor’s degree or equivalent work experience in cybersecurity, computer science, information technology, data science, intelligence studies, mathematics, or similar discipline.
• Minimum of 3 to 5 years of experience in threat hunting, network security analysis, cyber threat intelligence, incident investigation, or a related analytical discipline.
• Strong knowledge of TCP/IP, Internet infrastructure, and network behavior, with hands-on experience analyzing NetFlow, DNS, or comparable network metadata.
• Experience using Splunk or another analytics or SIEM platform to query, correlate, investigate, and visualize security data.

Responsibilities

• Lead threat analysis and investigations using network metadata (NetFlow, DNS) and related telemetry.
• Identify anomalous behavior, high-risk communications, malicious infrastructure, and potential indicators of compromise.
• Prepare and deliver recurring threat briefings, findings, and actionable recommendations to customer SOC and operations leadership.
• Prototype queries, dashboards, scripts, and analytic workflows to improve threat detection and analysis.

Skills

Threat hunting

Network security analysis

Incident investigation

Hypothesis-driven investigations

Excellent communication

Education

Bachelor’s degree or equivalent

Tools

Splunk

Linux

NetFlow

Job description

AT&T Public Sector is seeking a Principal Cybersecurity - Threat Hunter to lead threat hunting for a Federal National Security customer. The role involves proactive investigations of large-scale network metadata, developing hypotheses, and delivering clear, actionable intelligence to customer leadership.

The position is onsite in Chantilly, VA, requiring TS/SCI with polygraph. Expect collaboration with data scientists, engineers, and security teams to advance hunting tradecraft and tooling.