SITEC - Cyber Threat Hunter - MacDill AFB

Peraton requires a Cyber Threat Hunter to support the Special Operation Command Information Technology Enterprise Contract (SITEC) – 3 EOM.

This position is located at MacDill AFB in Florida.

The purpose of the Special Operations Forces Information Technology Enterprise Contract (SITEC) 3 Enterprise Operations and Maintenance (EOM) Task Order (TO) is to provide USSOCOM, its Component Commands, its Theater Special Operations Commands (TSOCs), and its deployed forces with Operations and Maintenance (O&M) services to maintain Network Operations (NetOps); maintain systems and network infrastructure; provide end user and common device support; provide configuration, change, license, and asset management; conduct training, and perform Install, Move, Add, Change (IMACs) services. The responsibilities and tasks associated with each requirement play a pivotal role to USSOCOM, the CIO/J6 organization, and ultimately the end-user who operate around the globe 24x7x365.

The Cyber Threat Hunter serves as a specialized technical expert responsible for proactively identifying, tracking, and disrupting sophisticated cyber adversaries that have bypassed traditional perimeter defenses and automated security controls.

Rather than relying solely on reactive alerts, the Threat Hunter formulates structured, hypothesis-driven hunt campaigns grounded in Cyber Threat Intelligence (CTI), adversary Tactics, Techniques, and Procedures (TTPs), and the MITRE ATT&CK framework.

Operating across multi-terabyte telemetry environments, the hunter analyzes raw endpoint, network, and cloud artifacts to uncover stealthy lateral movement, persistence mechanisms, and advanced persistent threat (APT) activity.

Findings from completed hunts are transitioned into production detection rules and response playbooks to continuously mature the enterprise security posture.

• Develop, test, and execute proactive, intelligence-led threat hunt hypotheses across enterprise endpoints, networks, and cloud workloads to discover undetected intrusions and advanced persistent threats (APTs).
• Analyze tactical and operational Cyber Threat Intelligence (CTI) reports, actor profiles, and technical indicators to extract adversary TTPs, operationalizing them into focused, enterprise-wide search patterns.