AOUSC - Cyber Threat Intelligence & Threat Hunting Lead

Position Title

Cyber Threat Intelligence & Threat Hunting Lead

Position Overview

The Cyber Threat Intelligence & Threat Hunting Lead will oversee integrated cyber threat intelligence (CTI), detection engineering, and proactive threat hunting operations supporting enterprise cyber defense missions.

The Lead will drive development of intelligence-driven detections, hunt methodologies, adversary tracking, SIEM content engineering, and operational threat-informed defense capabilities.

Key Responsibilities

• Lead CTI, detection engineering, and threat hunting operations.

• Develop intelligence-driven detection and hunt strategies.

• Produce operational and strategic threat intelligence reporting.

• Develop and maintain:

• SIEM detections,

• analytics,

• correlation rules,

• behavioral detections,

• and hunt playbooks.

• Conduct hypothesis-based threat hunting aligned to:

• MITRE ATT&CK,

• adversary TTPs,

• malware campaigns,

• and emerging threats.

• Integrate CTI into SOC workflows, detection engineering, and incident response operations.

• Analyze:

• malware trends,

• adversary infrastructure,

• campaigns,

• indicators,

• and attack patterns.

• Support automation and SOAR integration initiatives.

• Brief executives and technical leadership on emerging threats and operational risk.

Required Qualifications

• 10+ years of cybersecurity operations experience.

• 5+ years supporting CTI, threat hunting, or detection engineering programs.

• Experience with:

• Splunk,

• Sentinel,

• CrowdStrike,

• EDR telemetry,

• detection content engineering,

• and intelligence platforms.

• Strong understanding of:

• MITRE ATT&CK,

• adversary tradecraft,

• malware analysis,

• and intelligence analysis methodologies.

• Experience developing:

• SIEM detections,

• hunt analytics,

• detection tuning,

• and operational reporting.

Preferred Certifications

• GCTI
• GCFA
• GCIH
• GMON
• GCDA
• CISSP
• Splunk Security certifications