Threat Hunt Lead (CBP)

📋 Description

• Lead threat hunting for a CBP program on a hybrid Ashburn, VA site.
• Form and test hypotheses about detections the SOC might be missing.
• Dig into the environment to confirm or rule out hypotheses and translate findings into detections.
• Collaborate with SOC Manager and incident response/digital forensics leads.
• Balance thorough hunting with practicality; false positives are part of the process.

🎯 Requirements

• Experience with structured threat hunting using MITRE ATT&CK framework.
• Ability to turn hunt findings into production detections and documentation.
• Experience defending government or law enforcement data; ability to work with incomplete signals.
• Active CBP BI, DHS clearance, or DoD clearance preferred; any clearance can shorten start date.
• Certifications such as GCFA/GNFA are useful but not required.

🎁 Benefits

• Health Insurance, Life Insurance, Paid Time Off, Holiday Pay.
• Disability, Retirement, Learning and Development opportunities.
• Other optional benefit elections.