Cyber Threat Hunt Analyst

We are seeking a Cyber Threat Hunt Analyst to provide subject-matter expertise on a federal agency's proactive threat hunting mission. You will lead complex hunt missions, mentor junior hunters, and deploy to remote and air-gapped environments to extend security visibility across the agency's most sensitive systems. You will also be a key contributor to the team's long-term hunt roadmap, helping decide which threat actors, TTPs, and environments deserve the next hunt mission's focus.

Key Responsibilities:

• Lead complex threat hunting missions against enterprise networks, systems, and high value assets, including deployments using the CTH Fly-Away Kit (FAK).
• Fuse Threat Intelligence and prior hunt findings to formulate advanced attacker-activity hypotheses.
• Mentor junior and mid-level hunt analysts in hunt methodology and tradecraft.
• Drive creation of new detection content resulting from hunt missions and Purple Team engagements.
• Author Executive Summaries and Situation Reports for extended hunt missions.
• Serve as technical lead for Purple Team engagements, coordinating with the Penetration Testing Team and Detection Engineering.
• Contribute to the CTH team's long-term hunt roadmap and prioritization of hunt targets.
• Represent the CTH team in security observation reviews and cross-functional findings discussions.

Required Qualifications & Experience:

• US Citizenship
• 10+ years of related experience; BS degree (or 4 additional years as substitute)
• A minimum of seven (7) years of incident detection/response, malware analysis, or cyber forensics experience (or bachelor's degree plus five (5) years).
• Extensive experience analyzing and synthesizing intelligence, mentoring others, and fusing computer network attack analyses with counterintelligence/law-enforcement investigations.

Preferred Qualifications:

• Track record of leading Purple Team engagements or advanced adversary emulation exercises.
• Experience with OT/ICS or air-gapped environment hunting.
• Prior mentorship or informal team-lead experience within a threat hunt function.

Required Certifications:

• One or more: CASP+, CISSP, CISA, GCIH, GCED