Senior Threat Hunter

Leidos

Confirmed live today High trust
Hybrid

Quick summary

Work type
Hybrid
Location
Sierra Vista, AZ
Salary
$107,900–$195,050 / yr
Employment
Full-time
Posted
63 days ago
Freshness
Confirmed live today

Market check

Salary context

Below market

How this pay compares to similar roles

Similar $183k
This role $151k
$94k $239k
below market most similar roles pay here above market

This role pays less than 75% of similar roles. Most pay $151,868–$213,475 — the blue band above. At the midpoint, this role pays about $151k versus about $183k for comparable roles.

Based on 240 similar postings.

Employer

About Leidos

Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations.

Leidos currently has 426 open roles on FindRole.

Listed pay typically runs $92,300–$166,850 across 344 roles with salary data.

Most-posted roles

View all roles at Leidos

At a glance

TL;DR · Senior Threat Hunter

JOB TITLE: Senior Threat Hunter The Senior Threat Hunter joins the C5ISR Center Cyber Security Service Provider team to protect Department of War subscriber networks. You will proactively identify, investigate, and mitigate sophisticated cyber threats across diverse cloud and on-premises environments, including AWS, Microsoft Azure, Google Cloud Platform, Oracle Cloud, and various SaaS platforms. Daily responsibilities include leading incident response, conducting host and network analysis, and developing advanced detection strategies. You will build and tune AI-assisted detections using machine learning, create custom signatures, and develop threat-hunting hypotheses based on adversary tactics, techniques, and procedures. The role requires expertise in detection engineering, trend analysis, and content development to secure the Department of Defense Information Network. You must utilize advanced cybersecurity tools to translate complex technical findings into actionable reports for senior leadership and stakeholders.

What you'll do

  • Lead and support incident response during high-severity cyber incidents to provide containment and remediation actions.
  • Conduct proactive threat hunting across cloud and on-premises environments to identify malicious activity.
  • Develop countermeasures including custom signatures, detection rules, and correlation logic based on adversary TTPs.
  • Build and tune AI-assisted detections and machine learning capabilities to identify adversary behavior.
  • Develop and refine threat-hunting hypotheses based on intelligence and anomalous activity.
  • Produce actionable reports documenting findings, risks, and remediation actions for technical and senior leadership.
  • Develop and deliver cybersecurity training for threat hunters and network defenders.
  • Brief senior leaders on cyber threat activity, significant incidents, and emerging cybersecurity trends.

What we're looking for

  • Active TS/SCI security clearance.
  • 8+ years of relevant cybersecurity experience.
  • 7+ years of experience in cyber analysis, threat hunting, and/or purple-team or blue-team operations.
  • Experience working for or with a U.S. Government Cyber Security Service Provider (CSSP).
  • Security+ certification and a CSSP Analyst certification (e.g., CEH, GCIH, or equivalent).
  • Experience operating in complex enterprise environments including cloud, SaaS, and on-premises infrastructure.
  • U.S. citizenship and an active TS/SCI clearance.

More like this

Similar roles

Cyber Threat Hunter, Mid

Booz Allen Hamilton

Bethesda, MD 55 days ago
MITRE ATT&CK Splunk Enterprise SPL Behavioral Analytics Log Analysis Forensic Triage Threat Intelligence Anomaly Detection Machine Learning SOC IR CTI
2+ yrs exp

Cyber Threat Hunter

General Dynamics

Falls Church, VA 49 days ago $114,750–$155,250
Cyber Threat Hunting MITRE ATT&CK Splunk Elastic Cyber Security Architecture Threat Detection ITIL Logging and Analytics Information Assurance Agile
6+ yrs exp

Cyber Threat Hunter

Booz Allen Hamilton

McLean, VA 7 days ago $69,400–$158,000
MITRE ATT&CK EDR XDR SIEM KQL Python PowerShell Microsoft Sentinel CrowdStrike Falcon SentinelOne Palo Alto Cortex XDR Microsoft Defender for Endpoint Digital Forensics Incident Response Threat Intelligence Network Telemetry Endpoint Telemetry
3+ yrs exp

Cyber Threat Hunter

Booz Allen Hamilton

McLean, VA 7 days ago $69,400–$158,000
Threat Hunting MITRE ATT&CK EDR XDR SIEM KQL Python PowerShell Digital Forensics Incident Response SentinelOne CrowdStrike Falcon Palo Alto Cortex XDR Microsoft Defender for Endpoint Microsoft Sentinel Cyber Threat Intelligence
3+ yrs exp

Staff Security Engineer, Threat Hunting

Twilio

Remote 62 days ago $155,520–$194,400
AI Threat Hunting SIEM SOAR Terraform CloudFormation AWS GCP Infrastructure as Code Incident Response Threat Modeling Service-Oriented Architecture MITRE ATLAS Security Engineering Automation
3+ yrs exp Remote

Cyber Security Analyst

Leidos

Adelphi, MD 63 days ago $87,100–$157,450
SIEM IDS Incident Response AWS Microsoft Azure Google Cloud Platform Oracle Cloud NetFlow Packet Capture TCP/IP Unix Cyber Kill Chain Vulnerability Management Security+ CE CSSP-Infrastructure Support SaaS SOC Defense-in-Depth
4+ yrs exp Hybrid