> Markdown version of [/jobs/ext/1919746-cyber-threat-hunter](https://www.wearedevelopers.com/jobs/ext/1919746-cyber-threat-hunter). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cyber Threat Hunter - **Company:** Edgewater Federal Solutions - **Location:** Bethesda, MD, United States - **Experience:** Expert - **Salary:** $150,000.0 - $180,000.0 - **Contract:** Permanent contract - **Skills:** Kubernetes Security, Active Directory, Data Analysis, JIRA, Microsoft Azure, Software as a Service, Cloud Computing, Cloud Computing Security, Cyber Security, Computer Engineering, Computer Forensics, Data Recovery, Emulators, Issue Tracking Systems, Intrusion Detection Systems, Information Systems Security Architecture Professional, Log Analysis, Packet Analyzer, Open Source Intelligence, Scrum Methodology, Program Analysis, Security Information and Event Management, Software Engineering, Scripting, Office365, Malware, Cyber Threat Analysis, Infrastructure Automation Frameworks, Information Technology, Cybercrime, Splunk, Servicenow - **Published:** August 4, 2026 - **Apply:** https://jobs.localjobnetwork.com/apply/add/87928363/1 ## About the Role * 8+ years of experience in cybersecurity threat hunting or incident response roles. * Proficiency with threat hunting methodologies, tools, and techniques. * Experience with IT Service Management ticketing systems (HEAT or ServiceNow preferred). * Strong understanding of cloud-based and non-cloud-based applications such as Microsoft Azure, Microsoft O365, Microsoft Active Directory, and Cloud Access Security Brokers. * Familiarity with Security Information and Event Management (SIEM) systems. * Expert knowledge of Splunk ES and strong familiarity with Splunk SOAR. * Knowledge of Agile Scrum project management methodology. * Experience with Endpoint Detection and Response (EDR) agents such as Crowdstrike. * Ability to conduct malware analysis, including static and dynamic analysis. * Excellent communication and teamwork skills. * Must possess at least ONE (NOT all) of the stated certifications: * Bachelor's degree in computer science, computer engineering, software engineering, cybersecurity, or related field. Preferred: * Experience with log analysis, packet analysis, and using advanced threat-hunting techniques. * Experience with a variety of SIEM, EDR and IDS tools * Experience in cloud cybersecurity * Strong scripting skills * Experience with adversary emulation for the purpose of detection development. * Knowledge of Infrastructure-as-Code (IaC) and Container security threats. * Offensive Security Certified Professional (OSCP) or GIAC Penetration Tester Certification (GPEN) * GIAC Cyber Threat Intelligence (GCTI) * Certified Information Systems Security Professional (CISSP) * Other relevant industry certifications ## Description Respond to crisis or urgent situations to mitigate immediate and potential threats. * Investigate and analyze all relevant response activities, identifying and assessing the capabilities and activities of the full spectrum of cyber threats. * Review and analyze risk-based Security Information and Event Management (SIEM) alerts to develop hunt hypotheses. * Utilize open-source intelligence to inform hunt hypothesis development. * Propose, discuss, and document custom searches for automated detection of threat actor activity based on hunt findings. * Track and document cybersecurity incidents from detection to resolution. * Participate in government-led after-action reviews of incidents. * Triage malware events to identify the root cause of specific activity. * Provide computer forensic support to high technology investigations, including evidence seizure, computer forensic analysis, and data recovery. * Conduct malware analysis in out-of-band environments, including static and dynamic analysis of complex malware. * Monitor and assess complex security devices for patterns and anomalies, tagging events for Tier 1 & 2 monitoring. * Configure, deploy, and troubleshoot Endpoint Detection and Response agents (e.g., Crowdstrike and Sysmon). * Collect and analyze data from compromised systems using EDR agents and custom scripts. * Interface with IT contacts to install or diagnose problems with EDR agents. * Plan, conduct, and document iterative, hypothesis-based hunts using the Agile Scrum project management methodology. * Attend daily Agile Scrum standups and report progress on assigned Jira stories. * Support the development of Deliverables including Hunt Hypotheses, Hunt Reports, Detection Logic, and Incident Reports. ## Related Videos - [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data) - [Enhancing Workload Security in Kubernetes](https://www.wearedevelopers.com/videos/356-enhancing-workload-security-in-kubernetes) - [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture) - [Collaboration Quantified: Lessons from Open Source Developer Networks](https://www.wearedevelopers.com/videos/1422-collaboration-quantified-lessons-from-open-source-developer-networks) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Full Spectrum File Uploads](https://www.wearedevelopers.com/videos/870-full-spectrum-file-uploads) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Where To Find Software Engineering Jobs](https://www.wearedevelopers.com/magazine/396-where-to-find-software-engineering-jobs) - [Top 6 Hackathons for Developers in 2023](https://www.wearedevelopers.com/magazine/263-top-6-hackathons-for-developers-in-2023)