Detection Engineer/Threat Hunter

About the Role

Partner Forces is a management consulting firm helping homeland security organizations solve pressing and complex challenges. We partner with government agencies and industry to strengthen national security and critical infrastructure through expertise in strategy, program management, stakeholder engagement, technology implementation, preparedness, and business transformation. As a growing firm, every employee can contribute to client success and the future of Partner Forces. Our culture is grounded in six core values—Integrity, Excellence, Positivity, Candor, Determination, and Teamwork—and we invest in employee well‑being, professional development, and long‑term success. The position is a Detection Engineer / Threat Hunter supporting a critical federal cybersecurity mission.

Responsibilities

• Conduct proactive threat hunts across enterprise networks, endpoints, cloud environments, applications, and identity systems.
• Develop hunting hypotheses using threat intelligence, behavioral analytics, and emerging threat research.
• Design, develop, test, and tune security detections across SIEM, EDR/XDR, NDR, and cloud security platforms.
• Develop Sigma rules, YARA signatures, SIEM queries, analytics rules, and detection playbooks.
• Analyze security telemetry to identify suspicious activity, emerging threats, and potential compromises.
• Use MITRE ATT&CK and other threat frameworks to evaluate and improve detection coverage.
• Operationalize cyber threat intelligence by translating adversary TTPs and indicators into actionable detection opportunities.
• Partner with SOC, Incident Response, and Cyber Threat Intelligence teams during investigations and active incidents.
• Identify visibility and monitoring gaps and recommend improvements to logging, telemetry, and security controls.
• Support adversary emulation and purple‑team exercises to test and strengthen detection capabilities.
• Develop metrics, dashboards, and recommendations that help clients understand and improve security monitoring effectiveness.
• Clearly communicate technical findings and recommendations to technical and non‑technical stakeholders.

Requirements

• U.S. citizenship and a Top‑Secret clearance.
• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a related field, or equivalent relevant experience.
• 3 to 7 years of cybersecurity experience with direct experience in threat hunting, detection engineering, security operations, incident response, or a related discipline.
• Strong understanding of adversary tactics, techniques, and procedures.
• Experience with SIEM platforms, security analytics tools, and endpoint, network, cloud, or identity‑based security telemetry.
• Working knowledge of MITRE ATT&CK, Cyber Kill Chain, and threat hunting methodologies.
• Familiarity with scripting and automation using Python, PowerShell, KQL, or similar languages.
• Strong investigative, analytical, and problem‑solving skills.
• Ability to communicate complex technical information clearly and work collaboratively in a client‑facing environment.
• Experience with cloud security monitoring, malware analysis, digital forensics, cyber threat intelligence, adversary emulation, or zero‑trust initiatives is a plus.