AOUSC - Cyber Threat Intelligence & Threat Hunting Lead

Position Title Cyber Threat Intelligence & Threat Hunting Lead Position Overview The Cyber Threat Intelligence & Threat Hunting Lead will oversee integrated cyber threat intelligence (CTI), detection engineering, and proactive threat hunting operations supporting enterprise cyber defense missions. The Lead will drive development of intelligence-driven detections, hunt methodologies, adversary tracking, SIEM content engineering, and operational threat-informed defense capabilities.

Key Responsibilities

Lead CTI, detection engineering, and threat hunting operations. Develop intelligence-driven detection and hunt strategies. Produce operational and strategic threat intelligence reporting. Develop and maintain: SIEM detections, analytics, correlation rules, behavioral detections, and hunt playbooks. Conduct hypothesis-based threat hunting aligned to: MITRE ATT&CK, adversary TTPs, malware campaigns, and emerging threats.

Integrate CTI into SOC workflows, detection engineering, and incident response operations. Analyze: malware trends, adversary infrastructure, campaigns, indicators, and attack patterns. Support automation and SOAR integration initiatives. Brief executives and technical leadership on emerging threats and operational risk.

Required Qualifications 10+ years of cybersecurity operations experience. 5+ years supporting CTI, threat hunting, or detection engineering programs. Experience with: Splunk, Sentinel, Crowd. Strike, EDR telemetry, detection content engineering, and intelligence platforms. Strong understanding of: MITRE ATT&CK, adversary tradecraft, malware analysis, and intelligence analysis methodologies.

Experience developing: SIEM detections, hunt analytics, detection tuning, and operational reporting. Preferred Certifications GCTI GCFA GCIH GMON GCDA CISSP Splunk Security certifications