Cyber Threat Intelligence and Threat Hunting Lead

Job overview

The Cyber Threat Intelligence and Threat Hunting Lead is an onsite, full-time role in Washington, DC; compensation is not specified. The role supports enterprise cyber defense missions through integrated threat intelligence, detection engineering, and proactive threat hunting. The lead develops intelligence-driven detections and hunt methods, integrates threat intelligence into security operations, and briefs leadership on emerging threats and operational risk. This work strengthens threat-informed defense and incident response capabilities.

What you'll do

• Lead cyber threat intelligence, detection engineering, and threat hunting
• develop detection and hunt strategies
• produce threat intelligence reporting
• maintain SIEM detections, analytics, correlation rules, behavioral detections, and hunt playbooks
• conduct hypothesis-based hunts aligned to MITRE ATT&CK and adversary tactics
• integrate intelligence into SOC and incident response workflows
• analyze malware trends and adversary activity
• support automation and SOAR integration
• brief leadership.

What we're looking for

Skills & competencies

cyber threat intelligence

threat hunting lead

washington dc

cfocus software

detection engineering

siem

mitre att&ck

soc

incident response

splunk

sentinel

crowdstrike

Work arrangement

• Weekend coverage required

Why this role

Requires 10+ years of cybersecurity operations experience and 5+ years supporting CTI, threat hunting, or detection engineering programs.

About the employer

cFocus Software Incorporated is hiring for this role. Industry: Research and Development in the Physical, Engineering, and Life Sciences (except Nanotechnology and Biotechnology). Sector: 54.