Threat Hunter – TS/SCI, On-Site at Fort Bragg

Omniscius Consulting; Fort Bragg (NC); On-site; USD 110,000 - 160,000; Full time

Job summary

Omniscius Consulting seeks a Threat Hunter to support the USARC DCOMSS program at Fort Bragg, NC. You will hunt adversaries using hypothesis-driven methods, merging defensive telemetry with CTI to improve detections for Blue Team and CTI operations.

Responsibilities include developing hunt hypotheses, analyzing SIEM/EDR/NetFlow data, refining detection rules, and coordinating with CTI and exercise personnel. Active TS/SCI and U.S. citizenship are required.

Qualifications

• Minimum 3 years of documented relevant threat hunting and intrusion analysis.
• DoD Cyber Workforce DCWF 511 Advanced and DCWF 171 Intermediate proficiency.
• Meet DoDM 8140.03 qualification requirements before independent cyber work.
• Current DCWF/DoD certifications: CBROPS, CFR, CySA+, GCFA, GCIA, GICSP.

Responsibilities

• Develop hunt hypotheses from tactics, intelligence, indicators, and telemetry gaps.
• Search SIEM, EDR, NetFlow, and packet data for complex intrusion activity.
• Analyze findings, distinguish threats from benign activity, escalate when needed.
• Develop and validate correlation rules, signatures, and host-based detections.
• Document objectives, methods, data sources, evidence, and coverage gaps.
• Coordinate indicators with CTI, Blue Team, and exercise personnel.
• Perform duties consistent with position responsibilities, clearance, and scope.

Skills

Threat hunting

Intrusion analysis

MITRE ATT&CK

Threat intelligence

Detection engineering

SIEM

EDR

NetFlow

Packet capture

YARA

Snort/Suricata

Education

DCWF 511 Advanced

DCWF 171 Intermediate

DoDM 8140.03 qualification

CBROPS

CFR

CySA+

GCFA

GCIA

GICSP

Tools

SIEM

EDR

NetFlow

Packet capture

YARA

Snort/Suricata

Job description

Omniscius Consulting seeks a Threat Hunter to support the USARC DCOMSS program at Fort Bragg, NC. You will hunt adversaries using hypothesis-driven methods, merging defensive telemetry with CTI to improve detections for Blue Team and CTI operations.

Responsibilities include developing hunt hypotheses, analyzing SIEM/EDR/NetFlow data, refining detection rules, and coordinating with CTI and exercise personnel. Active TS/SCI and U.S. citizenship are required.