Threat Hunter Public Trust

Peraton is seeking a Threat Hunter to become part of Federal Strategic Cyber Mission programs.

Location: Warrenton VA; must be local to the work location.

In this role you will:

• Conduct technical analysis of network traffic to identify anomalies which may represent potentially malicious activity and document the analysis in prescribed formats.

• Monitor and understand emerging threats and the ability to define the technical vulnerabilities and exploits that could present a threat to government networks and then perform analysis on the emerging capabilities/exploits and document the analysis in prescribed formats.
• Monitor IDS/IPS alerts analyze associated network traffic and document the analysis in prescribed formats.
• Report detected incidents to agency work toward resolution and escalate when required according to SOP.
• Development of detection signatures based on indicators and analysis.
• Testing of detection signatures to determine successful detection and level of false positives.
• Deployment of detection signatures based on SOPs.
• Conduct technical analysis of data from partners constituents and monitoring systems to understand the nature of attacks threats and vulnerabilities.
• Assist with the development of mitigation strategies.
• Deploy to provide on-site support and assistance in the event of an exercise or cyber incident.
• Identify and document network-based tactics techniques and procedures used by an attacker to gain unauthorized system access.
• Participate in inter-agency sponsored community of interest analysis groups and technical briefings and exchanges.

Minimum requirements:

• Bachelors degree and 5 years of experience or 3 years of experience with a Masters.
  • An additional 4 years of experience will be considered in lieu of degree.
• Demonstrated experience in threat hunting or network/cloud forensics.
• Proven ability to develop and recommend corrective actions.
• Expertise knowledge and experience integrating new architectural analysis of cyber security features.
• Comfortable interfacing with external entities including law enforcement intelligence and other government organizations and agencies.
• U.S. citizenship is required.
• Active Public Trust security clearance required.
• Willingness and ability to travel 10-25%.

Preferred:

• Experience using Databricks.
• Experience using Artificial intelligence (AI) and large language models (LLMs).
• Possess one of the following certifications:
  • CCNA-Security CND CySA GICSP GSEC Security CE or SSCP
• Ability to create troubleshoot configure and operate complex scripting solutions with the ability to output the results in a variety of formats (e.g. HTML XML etc.) and to re-purpose the results for reports targeting different technical levels (e.g. other analysts management etc.).

Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the worlds leading mission capability integrator and transformative enterprise IT provider we deliver trusted highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land sea space air and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day our employees do the cant be done by solving the most daunting challenges facing our customers. Visit to learn how were keeping people around the world safe and secure.