{"id":1358190,"url":"https://alion.io/job/umgc-cybersecurity-threat-hunter","title":"Cybersecurity Threat Hunter","company":{"id":1781628,"name":"University of Maryland Global Campus","domain":"umgc.edu","url":"https://alion.io/company/umgc","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":92,"open_postings":56,"ghost_share":0,"stale_share":0.107,"repost_share":0,"time_to_fill_p50_days":66,"computed_at":"2026-10-20T05:45:00Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Adelphi, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":121000,"max_usd":234000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":1306},"experience_years_min":6,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Bash","optional":false},{"name":"Linux","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"Windows","optional":false}],"status":"live","first_seen_at":"2026-06-17T00:00:00Z","employer_posted_date":"2026-06-17","last_verified_at":"2026-10-20T04:44:06Z","board_verified":true,"closed_at":null,"days_open":125,"trust":{"level":"ok","repost_count":0,"flags":[],"days_open":125},"description":"Cybersecurity Threat HunterSecurity OperationsUS Exempt RegularFull timeStateside Exempt 3.4Cybersecurity Threat Hunter\nSecurity Operations\nFull-time, Exempt Regular, Pay Grade 3.4\nLocation: Hybrid (Occasional onsite presence in Adelphi, MD)\nWe are seeking a highly skilled and proactive Cybersecurity Threat Hunter to join our Information Security team. In this role, you will be responsible for proactively identifying advanced threats and developing detection strategies to protect enterprise assets. You will apply your deep expertise in adversary tactics, techniques, and procedures (TTPs), threat intelligence, and endpoint/network telemetry to hunt, investigate, and mitigate complex threats in our hybrid multi-cloud environment.\nDuties and Responsibilities:\nLead proactive threat hunting activities across endpoints, network, and cloud environments to detect anomalous behaviors and emerging threats.\n\nAnalyze large security logs to identify patterns of malicious activity and Indicators of Compromise (IOCs) using our SIEM and EDR platforms, augmenting analysis with threat intelligence feeds.\n\nDevelop and refine hypotheses for hunting campaigns based on current threat landscape and adversary TTPs (e.g., MITRE ATT&CK).\n\nCollaborate with the bigger Information Security team and other cross-functional teams to triage, escalate, and respond to identified threats.\n\nDesign and implement custom detection logic and rules to improve threat detection efficacy within SIEM tool.\n\nPerform analysis on phishing emails, malicious files, and other threat artifacts when required.\n\nDevelop documentation, hunting playbooks, and knowledge transfer materials for junior analysts and other stakeholders.\n\nProduce relevant valuable reports following threat assessments highlighting recommendations to improve security.\n\nProvide expert-level consultation on threat hunting methodologies and cyber adversary techniques.\n\nMaintain awareness of the latest security threats, vulnerabilities, and attack techniques through continuous research.\n\nMentor and guide tier 1 engineers, fostering skill development and knowledge sharing.\n\nSkills and Competencies:\nStrong knowledge of threat actor tactics, techniques, and procedures (TTPs) and experience using frameworks such as MITRE ATT&CK.\n\nProficiency with EDR tools, SIEM platforms, and threat intelligence platforms.\n\nAbility to develop detection logic using scripting or query languages (e.g., PowerShell, Bash, Python).\n\nExperience with log and packet analysis, endpoint forensics, and malware reverse engineering.\n\nIn-depth understanding of operating system internals (Windows, Linux), network protocols, and cloud infrastructure (AWS, Azure).\n\nStrong analytical and problem-solving skills, with the ability to work independently and collaboratively.\n\nExcellent verbal and written communication skills; capable of conveying technical findings to technical and non-technical audiences.\n\nRequired Qualifications:\nEducation:\nBachelor’s degree in Cybersecurity, Computer Science, Information Systems, or a related field (or equivalent experience).\n\nExperience:\nMinimum of 6-8 years of relevant cybersecurity experience, with at least 5 years focused on threat hunting, threat intelligence, or incident response.\n\nPreferred Qualifications:\nCertifications:\nGIAC Cyber Threat Intelligence (GCTI)\n\nGIAC Certified Incident Handler (GCIH)\n\nGIAC Advanced Threat Hunting (GATH)\n\nCertified Threat Intelligence Analyst (CTIA)\n\nOSCP or similar offensive security certifications\n\nAll submissions should include a cover letter and resume.\nThe University of Maryland Global Campus (UMGC) is an equal opportunity employer and complies with all applicable federal and state laws regarding nondiscrimination. UMGC is committed to a policy of equal opportunity for all persons and does not discriminate on the basis of race, color, national origin, age, marital status, sex, sexual orientation, gender identity, gender expression, disability, religion, ancestry, political affiliation or veteran status in employment, educational programs and activities, and admissions.\nWorkplace Accommodations:\nThe University of Maryland Global Campus Global Campus (UMGC) is committed to creating and maintaining a welcoming and inclusive working environment for people of all abilities. UMGC is dedicated to the principle that no qualified individual with a disability shall, based on disability, be excluded from participation in or be denied the benefits of the services, programs, or activities of the University, or be subjected to discrimination. For information about UMGC’s Reasonable Workplace Accommodation Policy or to request an accommodation, applicants/candidatescan contact Employee Accommodations via email .\nBenefits Package Highlights:\nGenerous Time Off: Enjoy 22 days of paid vacation, 15 days of sick leave, 3 personal days, and 16 paid holidays (17 during general election years).For part-time employees, time off rates will be prorated based on the number of hours worked.\n\nComprehensive Health Coverage: Access to health care, medical with vision, dental, and prescription plans for both individuals and families, effective from the 1st of the month following your hire date.\n\nInsurance Options: Term Life Insurance, Accidental Death and Dismemberment Insurance, and Long-Term Disability (LTD) Insurance. Part-time employees working less than 0.5 FTE are not eligible for LTD.\n\nFlexible Spending Accounts: Available for medical and dependent care expenses.\n\nRetirement Plans: Choose between the Optional Retirement Program (ORP) or the Maryland State Retirement and Pension System (MSRPS).\n\nSupplemental Retirement Plans: include 401(k), 403(b), 457(b), and various Roth options. The university does not provide matching funds.\n\nTuition Remission: Immediate availability for Regular Exempt Staff. Spouses and dependent children are eligible for undergraduate tuition remission after two years of service. NOTE: For part-time employees (at least 50 percent of the time), tuition remission benefits are prorated.\n\nHiring Range:\n$120,000.00 - $135,000.00","description_format":"text","description_chars":6118,"description_truncated":false,"requirements":{"experience_years_min":6,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Life insurance","Retirement plans"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Higher Education","E-learning"],"lifecycle":[{"event":"open","at":"2026-09-27T22:57:47Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 12","filings_12m":12,"filings_prev_12m":0,"green_card_filings_12m":0,"median_offered_wage_usd":172500,"route":null,"cap_exempt":true,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)"],"filings_for_role_12m":0}],"liveness":{"score":23,"band":"cold","label":"Long shot","p_open":1,"p_active":0.641,"p_room":0.36,"age_days":125,"expected_fill_days":66,"reasons":["conf:1","velocity","win:tail","crowd:brand"],"computed_at":"2026-10-20T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/umgc-cybersecurity-threat-hunter","json_url":"https://alion.io/job/umgc-cybersecurity-threat-hunter.json","meta":{"generated_at":"2026-10-20T14:08:14Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":15862,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-21T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1781628},"rest":"https://alion.io/mcp/rest/get_company?id=1781628"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fumgc-cybersecurity-threat-hunter"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fumgc-cybersecurity-threat-hunter"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fumgc-cybersecurity-threat-hunter"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/umgc-cybersecurity-threat-hunter\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fumgc-cybersecurity-threat-hunter"}]}