Cyber Threat Hunt Lead

Tyto Athene is searching for a Cyber Threat Hunt Team Lead to support a law enforcement customer in Ashburn, VA. You will play a critical role in leading in-depth analyses and responding to incidents from cyber threats facing our clients. You will work closely with other threat hunters, threat analysts, and an established SOC, and we will rely on you to hunt down the most advanced global threats. In addition to being our initial point of contact for end users, you will serve as the escalation point for other analysts, helping guide them through more complex and high-priority incidents.

Responsibilities:

• Lead cross-functional teams to perform in-depth analysis and investigation of high-priority cybersecurity incidents
• Utilize security tools to analyze, investigate, and triage security alerts
• Lead and execute advanced cyber threat hunting operations to detect and mitigate sophisticated threats across enterprise networks and systems.
• Perform detailed threat analysis, technical analysis, and network asset traversal to identify anomalies and malicious activity.
• Collaborate with the SOC and Threat Analysts to contain and investigate major incidents
• Provide simple and reusable hunt tactics and techniques to a team of security engineers, SIEM specialists, and SOC analysts
• Conduct host- and network-based forensic investigations to detect advanced persistent threats (APTs), intrusions, malware, and suspicious activity.
• Develop and refine threat detection content, including custom signatures, rules, and advanced analytics.
• Interpret scripts and code artifacts in languages such as VBScript, Python, C++, HTML, XML, and others necessary for threat identification and response.
• Collaborate closely with the Cyber Threat Intelligence (CTI) team to integrate intelligence findings into hunt strategies and prioritize tactics, techniques, and procedures (TTPs).
• Maintain expert-level understanding of industry threat actors, tactics, cyber threat trends, and evolving attack techniques.
• Communicate significant findings to leadership and work with IT asset owners to deconflict events and ensure appropriate response actions.
• Recommend and drive corrective actions, best practices, and cybersecurity improvements across the organization's IT environment.
• Lead the Cyber Threat Hunt team in day-to-day operations, mentoring junior analysts and shaping hunt methodologies.

Qualifications

Required:

• 5+ years of experience as a Tier III Cyber Threat Hunt Analyst conducting advanced threat hunting and forensic analysis.
• 5+ years of hands-on experience in cybersecurity operations, including at least 2 years of recent experience in network-based security monitoring.
• Strong background in cybersecurity domains including:
  
  • Host and network forensics
  • Intrusion detection and analysis
  • Malware identification and reverse engineering fundamentals
  • Security content and signature development
• Demonstrated ability to interpret and analyze automated scripts and programming code to support detection efforts.
• Experience using and managing SIEM and endpoint/network defense platforms such as Splunk and Tanium.
• Proven expertise in analyzing and understanding the global cyber threat landscape and adversary behaviors.
• Strong communication skills with experience reporting findings to senior leadership and stakeholders.

Desired:

• CISSP - Certified Information Systems Security Professional
• Certified Ethical Hacker (CEH) or one of the following: DoD 8570 IAT Level II or IAM Level I or CSSP Analyst / Incident Responder
• GCFA - GIAC Certified Forensic Analyst
• GCFE - GIAC Certified Forensic Examiner
• GREM - GIAC Reverse Engineering Malware
• GNFA - GIAC Network Forensic Analyst

Location:

• Ashburn, VA

Clearance:

• TS/SCI Clearance required

About Tyto Athene

Compensation:

• Compensation is unique to each candidate and relative to the skills and experience they bring to the position. This does not guarantee a specific salary as compensation is based upon multiple factors such as education, experience, certifications, and other requirements, and may fall outside of the above-stated range.

Benefits:

• Highlights of our benefits include Health/Dental/Vision, 401(k) match, Paid Time Off, STD/LTD/Life Insurance, Referral Bonuses, professional development reimbursement, and parental leave.

Tyto Athene is a trusted leader in IT services and solutions, delivering mission-focused digital transformation that drives measurable success. Our expertise spans four core technology domains-Network Modernization, Hybrid Cloud, Cybersecurity, and Enterprise IT-empowering our clients with cutting-edge solutions tailored to their evolving needs. With over 50 years of experience, Tyto Athene proudly support Defense, Intelligence, Space, National Security, Civilian, Health, and Public Safety clients across the United States and worldwide.

At Tyto Athene, we believe that success starts with our people. We foster a collaborative, innovative, and mission-driven environment where every team member plays a critical role in shaping the future of technology. Are you ready to join #TeamTyto?

Tyto Athene, LLC is an Equal Opportunity Employer; all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, [sexual orientation, gender identity,] national origin, disability, status as a protected veteran, or any characteristic protected by applicable law.