Threat Engineer

Johns Hopkins Applied Physics Laboratory (APL), a leading research center in national security and advanced technology, seeks a Threat Engineer to design and execute sophisticated cyber threat detection, analysis, and emulation. You will conduct threat hunts, malware and exploit analysis, and red team-style assessments against complex, mission-critical systems. Partnering with scientists and engineers, you'll develop analytics, tools, and defenses that directly protect national security and critical research, while benefiting from APL's collaborative, learning-focused, and mission-driven culture.

Responsibilities

• Design and execute cyber threat hunts, simulations, and red team assessments against complex systems.
• Develop detection logic, analytics, and tools to identify advanced persistent threats.
• Analyze malware, exploits, and adversary tradecraft to inform defensive architectures.
• Collaborate with researchers and engineers to harden mission-critical and experimental systems.
• Produce technical reports and briefings for stakeholders on threats, vulnerabilities, and mitigations.
• Contribute to research prototypes and transition defensive capabilities into operational environments.
• Stay current on emerging threats, TTPs, and security technologies relevant to national security missions.

Required Skills

• Threat hunting
• Malware analysis
• Network security monitoring
• Incident response
• Adversary emulation/red teaming
• Security analytics and detection engineering
• Exploit analysis and reverse engineering
• Scripting/programming (Python, Power
• Shell, etc.)
• SIEM and security tooling configuration
• Threat intelligence analysis