Position Title
Cyber Threat Intelligence & Threat Hunting Lead
Position Overview
The Cyber Threat Intelligence & Threat Hunting Lead will oversee integrated cyber threat intelligence (CTI), detection engineering, and proactive threat hunting operations supporting enterprise cyber defense missions.
The Lead will drive development of intelligence-driven detections, hunt methodologies, adversary tracking, SIEM content engineering, and operational threat-informed defense capabilities.
Key Responsibilities

Lead CTI, detection engineering, and threat hunting operations.
Develop intelligence-driven detection and hunt strategies.
Produce operational and strategic threat intelligence reporting.
Develop and maintain:
- SIEM detections,
- analytics,
- correlation rules,
- behavioral detections,
- and hunt playbooks.
Conduct hypothesis-based threat hunting aligned to:
- MITRE ATT&CK,
- adversary TTPs,
- malware campaigns,
- and emerging threats.
Integrate CTI into SOC workflows, detection engineering, and incident response operations.
Analyze:
- malware trends,
- adversary infrastructure,
- campaigns,
- indicators,
- and attack patterns.
Support automation and SOAR integration initiatives.
Brief executives and technical leadership on emerging threats and operational risk.

Required Qualifications

10+ years of cybersecurity operations experience.
5+ years supporting CTI, threat hunting, or detection engineering programs.
Experience with:
- Splunk,
- Sentinel,
- CrowdStrike,
- EDR telemetry,
- detection content engineering,
- and intelligence platforms.
Strong understanding of:
- MITRE ATT&CK,
- adversary tradecraft,
- malware analysis,
- and intelligence analysis methodologies.
Experience developing:
- SIEM detections,
- hunt analytics,
- detection tuning,
- and operational reporting.

Preferred Certifications

GCTI
GCFA
GCIH
GMON
GCDA
CISSP
Splunk Security certifications

AOUSC - Cyber Threat Intelligence & Threat Hunting Lead

Skills mentioned

About the role

Similar jobs