Cyber Hunt Senior Analyst

ECS is seeking a Cyber Hunt Senior Analyst to support a major federal civilian agency's enterprise-scale cybersecurity program. The role provides technical leadership across threat hunting, cyber threat intelligence, detection engineering, adversary emulation, and security operations while helping protect sensitive national-level information and improve cyber resilience.

Responsibilities:

• Provide strategic oversight and technical leadership for threat hunting, CTI, and SOC analysts across the program
• Advise on threat modeling, adversary emulation, and Purple Team exercises to validate and strengthen the agency's defensive posture
• Support interagency collaboration and national-level threat intelligence sharing initiatives
• Lead the development and continuous improvement of threat detection frameworks and advanced analytics capabilities
• Apply the MITRE ATT&CK framework to map observed adversary behaviors to specific techniques, turning fragmented alerts into clear and actionable threat narratives
• Develop and refine detection engineering strategies, including hypothesis-driven hunting methodologies and behavioral analytics
• Support the design and execution of adversary emulation exercises to proactively test and improve detection coverage
• Conduct deep-dive analysis of threat actor profiles, campaigns, and TTPs to inform defensive priorities
• Produce high-quality threat intelligence reports and briefings for both technical teams and senior government officials
• Collaborate with SOC, engineering, and architecture teams to ensure detection logic and hunt findings are operationalized across the enterprise
• Mentor and provide guidance to junior and mid-level hunt analysts, fostering a culture of continuous learning and technical excellence
• Contribute to the development and maintenance of team playbooks, standard operating procedures, and knowledge management repositories

Requirements:

• U.S. Citizenship required
• 12+ years of experience in cybersecurity and threat intelligence, with a demonstrated focus on threat hunting, detection engineering, and adversary analysis
• Active Public Trust 6c clearance, or the ability to obtain and maintain one
• Deep knowledge of behavioral analytics, threat actor profiling, and detection engineering methodologies
• Hands-on experience with the MITRE ATT&CK framework, including TTP mapping, detection logic development, and adversary emulation
• Familiarity with CISA threat hunting guidance and federal cybersecurity standards and frameworks
• Experience with EDR/NDR platforms, SIEM technologies, and cloud-native security tools
• Proven ability to translate complex technical findings into clear, actionable language for both technical teams and executive and stakeholder audiences
• Strong written and verbal communication skills, with a track record of producing high-quality federal security documentation
• Experience supporting interagency threat intelligence sharing and collaboration within federal environments