← All roles

Threat Hunt Lead (CBP)

Agile Defense· Cybersecurity
Apply on company site
Hybrid (Reston, VA)$165k - $200kRegularPosted 2mo ago

About the role

Threat Hunt Lead role supporting U.S. Customs and Border Protection (CBP) with threat hunting, hypothesis-driven investigations, and development of production detections within a hybrid Reston, VA environment.

Responsibilities

  • Lead threat hunting for the program by formulating and testing hypotheses about activity the SOC may be missing.
  • Collaborate with the Security Operations Center Manager and incident response/digital forensics leads; hand off findings.
  • Develop detections from hunt findings to be used by analysts going forward; tune detections as conditions change.
  • Ensure findings are actionable for incident response and preserve evidence/context for forensics if needed.
  • Align threat hunting activities with federal law enforcement threat priorities and communicate with leadership and asset owners to deconflict findings.

Qualifications

  • GIAC, GCIH or CEH (Required Certification)
  • Minimum five (5) years as a Tier 3 senior cyber threat hunt analyst with threat analysis, technical analysis, and network asset traversal.
  • Minimum five (5) years hands-on experience in host and network-based security monitoring in the last two years.
  • Strong background in host/network forensics, intrusion identification, malware identification, and security content development (signatures, rules, queries).
  • Experience interpreting scripts or programming languages to support hunts or malware analysis (e.g., VB, Python, PowerShell, JavaScript, HTML/XML).
  • Experience in cyber threat hunt analysis using threat intelligence to identify and prioritize TTPs.
  • Deep knowledge of SIEM and EDR tools (e.g., Splunk, EDR solutions).
  • Ability to maintain understanding of cyber threat landscape and communicate findings to leadership; coordinate with Threat Intelligence, Pentest, and asset owners.
  • Leadership of the Cyber Threat Hunt team; propose corrective actions and communicate security issues, offenses, or best practices.
  • Strong written and oral communication skills.

Skills

Required:Threat huntingThreat intelligenceSIEM (e.g., Splunk)EDR/endpoint securityProgramming/scripting

Benefits

  • Health Insurance
  • Life Insurance
  • Paid Time Off
  • Holiday Pay
  • short-term and long-term Disability
  • Retirement
  • Learning and Development opportunities
  • other optional benefit elections
Last updated Oct 21, 2026. Interested? Apply on the company site.

About Agile Defense

Always Evolving

Agile Defense delivers advanced capabilities and solutions tailored to the most critical national security and civilian missions.

national securitycivilian missionsinnovationcapabilitiessolutions
Company profileWebsite

More open roles at Agile Defense