Threat Hunter: Hypothesis-Driven Cyber Defense & CTI

Strategic Operational Solutions, Inc; Fort Bragg (NC); On-site; USD 110,000 - 140,000; Full time

Job summary

Strategic Operational Solutions, Inc. (STOPSO) seeks a Threat Hunter to support the USARC DCOMSS program at Fort Bragg, NC. You will hunt adversaries using defensive telemetry and CTI to improve blue-team detection and incident response.

Responsibilities include developing hunt hypotheses, analyzing SIEM/EDR data, and coordinating with CTI and exercise personnel. Requires TS/SCI and DoD qualification compliance; on-site with mission-critical duties.

Qualifications

• Minimum 3 years of documented relevant experience.
• DoD CWF 511 Advanced and DCWF 171 Intermediate proficiency.
• Meet DoDM 8140.03 qualification requirements before independent cyber work.
• Certifications for 511 Advanced: CBROPS, CFR, CySA+, GCFA, GCIA, GICSP.

Responsibilities

• Develop hunt hypotheses from adversary tactics, intelligence, indicators, and telemetry gaps.
• Search SIEM, EDR, NetFlow, packet, host, authentication, and CTI data for complex intrusion activity.
• Analyze findings, distinguish benign behavior from threats, and elevate actionable activity for incident response.
• Develop and validate correlation rules, signatures, and host-based detections with authorized sensor stakeholders.
• Document hunt objectives, methods, data sources, evidence, coverage gaps, and recommended actions.
• Coordinate indicator packages and lessons learned with CTI, Blue Team, and exercise personnel.
• Perform other duties as assigned consistent with the position's responsibilities, qualifications, clearance, and authorized scope.

Skills

Threat hunting

Intrusion analysis

MITRE ATT&CK

Adversary TTPs

Cyber threat intelligence

Detection engineering

Education

3+ years of relevant experience

DoD Cyber Workforce Framework 511 Advanced

DCWF 171 Intermediate

DoDM 8140.03 qualification requirements

511 Advanced: CBROPS, CFR, CySA+, GCFA, GCIA, GICSP

171 Intermediate intelligence qualification

Tools

SIEM

EDR

NetFlow

Packet capture

YARA

Snort

Suricata

Job description

Strategic Operational Solutions, Inc. (STOPSO) seeks a Threat Hunter to support the USARC DCOMSS program at Fort Bragg, NC. You will hunt adversaries using defensive telemetry and CTI to improve blue-team detection and incident response.

Responsibilities include developing hunt hypotheses, analyzing SIEM/EDR data, and coordinating with CTI and exercise personnel. Requires TS/SCI and DoD qualification compliance; on-site with mission-critical duties.