SOC Threat Hunter / Splunk Architect (Purple Team Focus)

SOC Threat Hunter / Splunk Architect (Purple Team Focus)

Position Summary

DarkStar Intelligence is seeking a SOC Threat Hunter / Splunk Architect to support advanced Defensive Cyber Operations. This role blends SOC engineering, digital forensics, and purple team operations. The ideal candidate can architect Splunk alerting and dashboards, develop detection sensors, and pivot into threat hunting investigations that merge offensive insights with defensive operations.

Location: Reston, VA

Schedule (FT/PT): Full-Time

Travel Required: No

Shift: Day

Remote Type: None / On-Site

Security Clearance: TS/SCI CI polygraph required

Key Responsibilities

• Architect and tune Splunk dashboards and alerting rules to improve detection fidelity.
• Develop and optimize custom sensors to reduce false positives and improve SOC efficiency.
• Conduct threat hunting and purple team operations: proactively search for malicious activity, simulate adversary TTPs, and validate detections.
• Perform digital forensics and incident response (DFIR) on endpoints and network data, including evidence collection and timeline analysis.
• Conduct network traffic analysis (packet inspection, flow analysis, anomaly detection).
• Collaborate with red teams to refine detection strategies and ensure SOC visibility aligns with adversary tradecraft.
• Brief leadership on findings, sensor performance, and threat posture.

Minimum Qualifications

• Demonstrated experience in SOC engineering or threat hunting.
• Hands-on expertise with Splunk (architecting dashboards, building custom correlation rules, tuning alerts).
• Familiarity with digital forensics workflows and tools (e.g., X-Ways, EnCase, Volatility, Autopsy).
• Strong knowledge of network protocols and traffic analysis (TCP/IP, packet captures, IDS/IPS).
• Active TS/SCI with Polygraph.

Preferred Qualifications

• Experience supporting purple team operations (bridging offensive and defensive).
• Penetration testing experience or certifications (OSCP, GPEN, etc.).
• Familiarity with MITRE ATT&CK, threat hunting frameworks, and adversary emulation.
• Prior support to DoD or Intelligence Community SOC operations.

Compensation & Benefits

Target Salary Range: $200,000 - $250,000 annually

The listed pay range is intended as a general guideline and does not represent a guaranteed salary. Final compensation will be determined based on several factors, including responsibilities, candidate qualifications, internal equity, market data, and applicable laws or agreements.

DarkStar offers a competitive and comprehensive benefits package supporting the well-being and long-term success of our full-time employees.

Additional Details

• Travel: Minimal.
• Work Environment: On-site at Fort Meade, MD.

Security Note

All applicants must be U.S. citizens and must maintain eligibility for a U.S. government security clearance.

About DarkStar Intelligence

DarkStar Intelligence is a Service-Disabled Veteran-Owned Small Business (SDVOSB) committed to advancing national security through mission support and tradecraft development. We prioritize both client satisfaction and employee retention, delivering high-quality, intelligence-based solutions grounded in our "Core Four" values:

• Humility: We place mission success above personal recognition.
• Passion: We bring enthusiasm and dedication to every challenge.
• Agility: We adapt quickly to evolving operational needs.
• Ownership: We hold ourselves accountable for results and uphold the highest standards of excellence.

We are mission-driven and results-oriented, striving to make our country safer through every task we undertake.

Equal Employment Opportunity (EEO) Commitment

At DarkStar Intelligence LLC, we are committed to maintaining a professional and legally compliant work environment where individuals are treated with respect and fairness. We adhere strictly to all applicable Equal Employment Opportunity (EEO) laws and regulations.

Employment decisions at DarkStar are made solely on the basis of individual qualifications, performance, and business needs. We prohibit discrimination in all aspects of employment-including hiring, compensation, promotion, training, discipline, and termination-on the basis of: Race or color, Religion, Sex (including pregnancy, sexual orientation, and gender identity), National origin, Age, Disability, Genetic information, Veteran status. Or any other status protected by applicable federal, state, or local law

Our EEO standards are embedded in all employment practices to ensure compliance, fairness, and accountability. We enforce a zero-tolerance policy for unlawful discrimination or harassment and encourage employees to report concerns without fear of retaliation.

EEO Flyer: shorturl.at/abpNX

Employee Benefits

DarkStar Intelligence provides a competitive and comprehensive benefits package to support the health, financial stability, and personal well-being of our team members.

Core Benefits for employees:

• Health Coverage: Medical, dental, and vision plans
• Income Protection: Life insurance, short-term disability, and long-term disability
• Retirement Planning: 401(k) plan with employer contributions
• Work-Life Support: Employee Assistance Program (EAP) and legal services
• Paid Leave: Generous PTO, 11 paid federal holidays, and one floating holiday

Voluntary Benefits:

• Legal & Identity Protection: LegalShield and IDShield
• Additional Insurance: Whole life, accident, and critical care coverage

We believe in recognizing and supporting the professionals who make our mission possible. Your well-being is an investment in our collective success.