Cyber Team Operator — CYBERCOM SOC Operations

Cyber Hunt Team Operator — CYBERCOM SOC Operations

CYBERCOM's SOC recompete includes dedicated hunt team augmentation — proactive threat hunting across DODIN-connected networks, not reactive incident response. This is offensive-minded defensive work: you're looking for adversary TTPs before the alarm triggers.

Hunt missions are assigned by CYBERCOM's CNMF (Cyber National Mission Force) operations staff. You'll develop hunt hypotheses based on current threat intelligence, execute across available sensor platforms, and document findings in a format that feeds finished intelligence production. DFIR (Digital Forensics and Incident Response) experience is a baseline; experience with APT-level threat actors relevant to CYBERCOM's mission set is the competitive differentiator.

TS/SCI minimum; CI polygraph preferred for some hunt mission roles. GREM, GCFE, or GCFA certifications are weighted positively in the CYBERCOM technical evaluation framework.

Bachelor's in Cybersecurity, Computer Science, or equivalent experience