Threat and Research Technical Project Manager

Join a culture of empowerment and connectivity.

Learn the skills you need to accelerate your career.

Discover benefits that support your life and work.

Build mission-ready tech that protects the nation.

We are seeking an experienced Technical Project Manager to join our Security Operations Center (SOC) team to lead advanced threat and research functions. This role leads advanced analytics, threat hunting, cyber threat intelligence, malware analysis, and forensic support across all customer enterprise environments, including on‑prem, zero trust, and cloud environments.

The Threat and Research (T&R) Lead serves as the primary operational, analytical, and strategic coordinator for T&R functions and is the designated point of contact for escalations, reporting, inter‑team coordination, and alignment with customer cybersecurity directives. The T&R Lead will guide proactive and innovative approaches to identifying, mitigating, and investigating advanced threats targeting networks, systems, and mission spaces. The role requires deep technical expertise, strong leadership, and the ability to communicate complex findings to senior executives, cybersecurity leadership, and technical teams across the enterprise.

The T&R Lead will support SOC consolidation, Intake, and SOC Services activities, lead proactive threat hunting activities across environments to detect advanced and emerging cyber threats, oversee the optimization of the Threat Intelligence Platform for automated ingestion, enrichment, and distribution, and lead advanced malware analysis, reverse engineering efforts, and malicious code investigations. This role requires participation in a periodic on‑call rotation and timely response to incidents as they arise.

Join us. The world can't wait.

• 10+ years of experience with cybersecurity in threat hunting, threat intelligence, malware analysis, digital forensics, or SOC operations

• Experience leading advanced cyber threat research efforts in enterprise environments
• Experience with Splunk, including complex queries, dashboards, and content development, endpoint detection platforms, including Crowd Strike, Microsoft Defender, or Fire Eye MX, packet capture analysis, and forensic tools

• Experience with threat intelligence platforms, including MISP, and SIEM integration
• Knowledge of CNE and CNA tools and tradecraft along with signatures, tactics, techniques, and procedures associated with preparation for and execution and implementation of such attacks
• Knowledge of adversary TTPs, cyber kill chains, threat modeling frameworks, including MITRE ATT&CK, STRIDE, or PASTA, and nation-state threat actors

• Ability to draft high-quality reports, briefings, technical assessments, and executive summaries
• Top Secret clearance

• Bachelor’s degree

• Experience coordinating with government agencies and Intelligence Community partners
• Experience with Service Now or similar ticketing systems

• Ability to write and deliver succinct briefings, presentations, and reports to convey analysis, threat trends, threat actor profiles, indicator bulletins, vulnerability details and defensive strategies to varied audiences

• Knowledge of current and emerging cyber adversaries and their techniques, tactics, and procedures (TTPs)
• CISSP, GCTI, GCIA, GCIH, CEH, CTIA, or equivalent certification

Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information;
Top Secret clearance is required.

At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings…