Subject Matter Expert I
Core
Senior Subject Matter Expert leading threat hunting, detection engineering, and incident response for government clients, focusing on operational technology and industrial control systems.
Role type
Senior IC Threat Hunter & Detection Engineer
Builds
Production detection content, behavioral analytics, correlation rules, and automated response playbooks for OT/ICS environments
Domain
Cybersecurity, Threat Intelligence, Operational Technology (OT), Industrial Control Systems (ICS)
Required skills
Threat hunting, detection engineering, hypothesis development, adversary behavior analysis, evidence-based conclusions, security query languages (KQL, SPL, EQL), process execution analysis, Windows/Linux internals, MITRE ATT&CK mapping, Python, PowerShell
Preferred skills
CrowdStrike Falcon, Microsoft Defender, Cortex XDR, Sigma, detection-as-code, adversary emulation, federal cyber operations
Technologies
KQL, SPL, EQL, ES|QL, Python, PowerShell, CrowdStrike, Microsoft Defender, Cortex XDR, Elastic, Splunk
Responsibilities
Develop and test hypotheses to uncover adversary techniques; correlate evidence across data sources; build behavioral analytics and detection rules; translate findings into reusable detections; mentor analysts and set standards; coordinate remediation with infrastructure teams; evaluate new tools and analytical methods
Seniority
Senior, hands-on IC with leadership responsibilities