Threat and Research Technical Project Manager

Booz Allen Hamilton•Usa, VA

About The Position

Booz Allen is seeking an experienced Technical Project Manager to lead advanced threat and research functions within its Security Operations Center (SOC). The role leads advanced analytics, threat hunting, cyber threat intelligence, malware analysis, and forensic support across customer enterprise environments, including on-premises, zero-trust, and cloud environments. The Threat and Research Lead is the primary operational, analytical, and strategic coordinator for these functions and the designated point of contact for escalations, reporting, inter-team coordination, and alignment with customer cybersecurity directives. The lead guides proactive approaches to identifying, mitigating, and investigating advanced threats targeting networks, systems, and mission spaces, and communicates findings to senior executives, cybersecurity leadership, and technical teams. The position supports SOC consolidation, intake, and SOC services; leads proactive threat hunting; oversees Threat Intelligence Platform optimization for automated ingestion, enrichment, and distribution; and leads advanced malware analysis, reverse engineering, and malicious-code investigations. Participation in a periodic on-call rotation and timely incident response are required. The role requires 10 or more years of relevant cybersecurity experience, a bachelor's degree, and a Top Secret clearance. The projected annual compensation range is $99,000 to $225,000. Booz Allen describes benefits including health, life, disability, financial, and retirement benefits, paid leave, professional development, tuition assistance, work-life programs, dependent care, and recognition awards. Eligibility for benefit programs depends on regularly working at least 20 hours per week.

Requirements

10+ years of experience in cybersecurity in threat hunting, threat intelligence, malware analysis, digital forensics, or SOC operations.
Experience leading advanced cyber threat research efforts in enterprise environments.
Experience with Splunk, including complex queries, dashboards, and content development.
Experience with endpoint detection platforms such as CrowdStrike, Microsoft Defender, or FireEye MX.
Experience with packet capture analysis and forensic tools.
Experience with threat intelligence platforms, including MISP, and SIEM integration.
Knowledge of CNE and CNA tools and tradecraft, as well as signatures, tactics, techniques, and procedures associated with preparing for, executing, and implementing such attacks.
Knowledge of adversary TTPs, cyber kill chains, threat modeling frameworks such as MITRE ATT&CK, STRIDE, or PASTA, and nation-state threat actors.
Ability to draft high-quality reports, briefings, technical assessments, and executive summaries.
Top Secret clearance is required.
Bachelor's degree.
Ability to participate in a periodic on-call rotation and respond to incidents in a timely manner.

Nice To Haves

Experience coordinating with government agencies and Intelligence Community partners.
Experience with ServiceNow or similar ticketing systems.
Ability to deliver succinct briefings, presentations, and reports to varied audiences.
Knowledge of current and emerging cyber adversaries and their TTPs.
CISSP, GCTI, GCIA, GCIH, CEH, CTIA, or equivalent certification.

Responsibilities

Lead advanced analytics, threat hunting, cyber threat intelligence, malware analysis, and forensic support across customer enterprise environments.
Serve as the primary operational, analytical, and strategic coordinator for Threat and Research functions.
Act as the designated point of contact for escalations, reporting, inter-team coordination, and alignment with customer cybersecurity directives.
Guide proactive approaches to identifying, mitigating, and investigating advanced threats targeting networks, systems, and mission spaces.
Communicate complex findings to senior executives, cybersecurity leadership, and technical teams across the enterprise.
Support SOC consolidation, Intake, and SOC Services activities.
Lead proactive threat hunting across environments to detect advanced and emerging cyber threats.
Oversee optimization of the Threat Intelligence Platform for automated ingestion, enrichment, and distribution.
Lead advanced malware analysis, reverse engineering efforts, and malicious code investigations.
Participate in a periodic on-call rotation and respond to incidents in a timely manner.
Draft reports, briefings, technical assessments, and executive summaries.
Coordinate with varied audiences to convey analysis, threat trends, threat actor profiles, indicator bulletins, vulnerability details, and defensive strategies.