Threat and Research Technical Project Manager

Booz Allen Hamilton•Vienna, VA

3d•$99,000 - $225,000•Onsite

About The Position

Booz Allen is seeking an experienced Technical Project Manager to lead advanced threat and research functions within its Security Operations Center (SOC). The role leads advanced analytics, threat hunting, cyber threat intelligence, malware analysis, and forensic support across customer enterprise environments, including on-premises, zero-trust, and cloud environments. The Threat and Research (T&R) Lead is the primary operational, analytical, and strategic coordinator for T&R functions and the designated point of contact for escalations, reporting, inter-team coordination, and alignment with customer cybersecurity directives. The lead guides proactive approaches to identifying, mitigating, and investigating advanced threats and communicates complex findings to senior executives, cybersecurity leadership, and technical teams. The role supports SOC consolidation, Intake, and SOC Services activities; leads proactive threat hunting; oversees optimization of the Threat Intelligence Platform for automated ingestion, enrichment, and distribution; and leads advanced malware analysis, reverse engineering, and malicious-code investigations. Participation in a periodic on-call rotation and timely incident response are required.

Requirements

10 or more years of cybersecurity experience in threat hunting, threat intelligence, malware analysis, digital forensics, or SOC operations.
Experience leading advanced cyber threat research in enterprise environments.
Experience with Splunk, including complex queries, dashboards, and content development.
Experience with endpoint detection platforms such as CrowdStrike, Microsoft Defender, or FireEye MX; packet capture analysis; and forensic tools.
Experience with threat intelligence platforms, including MISP, and SIEM integration.
Knowledge of CNE and CNA tools and tradecraft, and signatures, tactics, techniques, and procedures associated with preparing for, executing, and implementing such attacks.
Knowledge of adversary TTPs, cyber kill chains, threat modeling frameworks such as MITRE ATT&CK, STRIDE, or PASTA, and nation-state threat actors.
Ability to draft high-quality reports, briefings, technical assessments, and executive summaries.
Top Secret clearance.
Bachelor’s degree.

Nice To Haves

Experience coordinating with government agencies and Intelligence Community partners.
Experience with ServiceNow or similar ticketing systems.
Ability to deliver succinct briefings, presentations, and reports conveying analysis, threat trends, threat actor profiles, indicator bulletins, vulnerability details, and defensive strategies to varied audiences.
Knowledge of current and emerging cyber adversaries and their TTPs.
CISSP, GCTI, GCIA, GCIH, CEH, CTIA, or equivalent certification.

Responsibilities

Lead advanced threat and research functions within the Security Operations Center.
Coordinate Threat and Research operations, analysis, and strategy, and serve as the point of contact for escalations, reporting, inter-team coordination, and alignment with customer cybersecurity directives.
Guide efforts to identify, mitigate, and investigate advanced threats targeting networks, systems, and mission spaces.
Communicate complex findings to senior executives, cybersecurity leadership, and technical teams.
Support SOC consolidation, Intake, and SOC Services activities.
Lead proactive threat hunting across environments to detect advanced and emerging cyber threats.
Oversee optimization of the Threat Intelligence Platform for automated ingestion, enrichment, and distribution.
Lead advanced malware analysis, reverse engineering, and malicious-code investigations.
Participate in a periodic on-call rotation and respond to incidents in a timely manner.
Draft reports, briefings, technical assessments, and executive summaries.