Cyber Hunt Analyst III

Agile Defense•Springfield, VA

About The Position

Agile Defense is seeking an experienced Cyber Threat Hunt Analyst III to proactively identify, investigate, and analyze sophisticated cyber threats across enterprise networks, endpoints, cloud environments, and information systems. The analyst independently conducts hypothesis-driven threat hunts, examines complex security telemetry, identifies adversary tactics, techniques, and procedures (TTPs), and develops actionable intelligence to improve organizational detection and response capabilities. The role applies advanced knowledge of threat actor behavior, digital forensics, network security, endpoint detection and response (EDR), and security information and event management (SIEM) technologies to discover malicious activity that may evade automated security controls. The analyst also supports complex incident response investigations and collaborates with threat hunters, security engineers, intelligence analysts, and Security Operations Center (SOC) personnel. The position requires independent technical judgment, proficiency in multiple threat hunting methodologies, and the ability to turn investigative findings into detection engineering improvements and actionable recommendations. A Top Secret/SCI clearance is required to start.

Requirements

5–7 years of progressively responsible cybersecurity experience, including at least 2–3 years in threat hunting, incident response, security monitoring, digital forensics, or detection engineering.
Top Secret/SCI clearance required to start.
Independent technical judgment.
Proficiency in multiple threat hunting methodologies.
Ability to translate investigative findings into detection engineering improvements and actionable recommendations.
Advanced knowledge of threat actor behavior, digital forensics, network security, endpoint detection and response (EDR), and security information and event management (SIEM) technologies.

Responsibilities

Proactively identify, investigate, and analyze sophisticated cyber threats across enterprise networks, endpoints, cloud environments, and information systems.
Independently conduct hypothesis-driven threat hunts and analyze complex security telemetry.
Identify adversary tactics, techniques, and procedures (TTPs).
Develop actionable intelligence to improve organizational detection and response capabilities.
Discover malicious activity that may evade automated security controls using advanced cybersecurity knowledge and technologies.
Support complex incident response investigations.
Collaborate with threat hunters, security engineers, intelligence analysts, and SOC personnel.
Translate investigative findings into detection engineering improvements and actionable recommendations.