Threat Hunter & Detection Engineer

Partner Forces; Arlington (VA); On-site; USD 120,000 - 160,000; Full time

Job summary

Partner Forces is seeking a Detection Engineer / Threat Hunter to support a critical federal cybersecurity mission. You will hunt across enterprise networks, endpoints, cloud environments, applications, and identity systems, translating adversary behavior into actionable detections and improvements.

This role requires curiosity, analytical rigor, and the ability to communicate with clients and teammates. A US citizenship and Top-Secret clearance are required as you collaborate with SOC, IR, and

Qualifications

• US Citizen required.
• Top-Secret Clearance required.
• Bachelor’s degree or equivalent experience in a related field.
• 3–7 years in cybersecurity with threat hunting/detection/IR experience.
• Strong understanding of adversary TTPs.
• Experience with SIEM, security analytics, and telemetry across endpoints, network, cloud, or identity.
• Familiarity with MITRE ATT&CK, Cyber Kill Chain, and threat hunting methodologies.
• Scripting/automation in Python, PowerShell, or similar.
• Strong investigative and analytical skills; clear technical communication.
• Experience in cloud security monitoring or threat intelligence is a plus.

Responsibilities

• Conduct proactive threat hunts across enterprise networks, endpoints, cloud, apps, and identity systems.
• Develop hunting hypotheses using threat intelligence and analytics.
• Design and tune detections across SIEM, EDR/XDR, NDR, and cloud security.
• Develop Sigma rules, YARA signatures, SIEM queries, and detection playbooks.
• Analyze telemetry to identify suspicious activity and potential compromises.
• Use MITRE ATT&CK and other frameworks to improve coverage.
• Translate adversary TTPs into actionable detections.
• Collaborate with SOC, IR, and Threat Intel during investigations.
• Identify visibility gaps and recommend telemetry improvements.
• Support adversary emulation and purple team exercises.
• Develop dashboards and metrics to show monitoring effectiveness.
• Communicate findings clearly to technical and nontechnical stakeholders.

Skills

Threat hunting

Detection engineering

Security operations

Incident response

Communication

Analytical thinking

Scripting

Education

Bachelor’s degree in Cybersecurity/CS/IT or related

Tools

SIEM platforms

EDR/XDR

KQL

Job description

Partner Forces is seeking a Detection Engineer / Threat Hunter to support a critical federal cybersecurity mission. You will hunt across enterprise networks, endpoints, cloud environments, applications, and identity systems, translating adversary behavior into actionable detections and improvements.

This role requires curiosity, analytical rigor, and the ability to communicate with clients and teammates. A US citizenship and Top-Secret clearance are required as you collaborate with SOC, IR, and