Position Title Cyber Threat Intelligence & Threat Hunting Lead Position Overview The Cyber Threat Intelligence & Threat Hunting Lead will oversee integrated cyber threat intelligence (CTI), detection engineering, and proactive threat hunting operations supporting enterprise cyber defense missions. The Lead will drive development of intelligence-driven detections, hunt methodologies, adversary tracking, SIEM content engineering, and operational threat-informed defense capabilities. Key Responsibilities • Lead CTI, detection engineering, and threat hunting operations. • Develop intelligence-driven detection and hunt strategies. • Produce operational and strategic threat intelligence reporting. • Develop and maintain: • SIEM detections, • analytics, • correlation rules, • behavioral detections, • and hunt playbooks. • Conduct hypothesis-based threat hunting aligned to: • MITRE ATT&CK, • adversary TTPs, • malware campaigns, • and emerging threats. • Integrate CTI into SOC workflows, detection engineering, and incident response operations. • Analyze: • malware trends, • adversary infrastructure, • campaigns, • indicators, • and attack patterns. • Support automation and SOAR integration initiatives. • Brief executives and technical leadership on emerging threats and operational risk. Required Qualifications • 10+ years of cybersecurity operations experience. • 5+ years supporting CTI, threat hunting, or detection engineering programs. • Experience with: • Splunk, • Sentinel, • CrowdStrike, • EDR telemetry, • detection content engineering, • and intelligence platforms. • Strong understanding of: • MITRE ATT&CK, • adversary tradecraft, • malware analysis, • and intelligence analysis methodologies. • Experience developing: • SIEM detections, • hunt analytics, • detection tuning, • and operational reporting. Preferred Certifications • GCTI • GCFA • GCIH • GMON • GCDA • CISSP • Splunk Security certifications