Threat and Research Technical Project Manager

Threat and Research Technical Project Manager

The Opportunity:

We are seeking an experienced Technical Project Manager to join our Security Operations Center (SOC) team to lead advanced threat and research functions. This role leads advanced analytics, threat hunting, cyber threat intelligence, malware analysis, and forensic support across all customer enterprise environments, including on‑prem, zero trust, and cloud environments.
The Threat and Research (T&R) Lead serves as the primary operational, analytical, and strategic coordinator for T&R functions and is the designated point of contact for escalations, reporting, inter‑team coordination, and alignment with customer cybersecurity directives. The T&R Lead will guide proactive and innovative approaches to identifying, mitigating, and investigating advanced threats targeting networks, systems, and mission spaces. The role requires deep technical expertise, strong leadership, and the ability to communicate complex findings to senior executives, cybersecurity leadership, and technical teams across the enterprise.

The T&R Lead will support SOC consolidation, Intake, and SOC Services activities, lead proactive threat hunting activities across environments to detect advanced and emerging cyber threats, oversee the optimization of the Threat Intelligence Platform for automated ingestion, enrichment, and distribution, and lead advanced malware analysis, reverse engineering efforts, and malicious code investigations. This role requires participation in a periodic on‑call rotation and timely response to incidents as they arise.

Join us. The world can't wait. You Have:  10+ years of experience with cybersecurity in threat hunting, threat intelligence, malware analysis, digital forensics, or SOC operations Experience leading advanced cyber threat research efforts in enterprise environments

Experience with Splunk, including complex queries, dashboards, and content development, endpoint detection platforms, including Crowd Strike, Microsoft Defender, or Fire Eye MX, packet capture analysis, and forensic tools

Experience with threat intelligence platforms, including MISP, and SIEM integration

Knowledge of CNE and CNA tools and tradecraft along with signatures, tactics, techniques, and procedures associated with preparation for and execution and implementation of such attacks

Knowledge of adversary TTPs, cyber kill chains, threat modeling frameworks, including MITRE ATT&CK, STRIDE, or PASTA, and nation-state threat actors

Ability to draft high-quality reports, briefings, technical assessments, and executive summaries

Top Secret clearance

Bachelor’s degree  Nice If You Have:  Experience coordinating with government agencies and Intelligence Community partners

Experience with Service Now or similar ticketing systems Ability to write and deliver succinct briefings, presentations, and reports to convey analysis, threat trends, threat actor profiles, indicator bulletins, vulnerability details and defensive strategies to varied audiences

Knowledge of current and emerging cyber adversaries and their techniques, tactics, and procedures (TTPs)
CISSP, GCTI, GCIA, GCIH, CEH, CTIA, or equivalent certification

Clearance: Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information;
Top Secret clearance is required.

Compensation At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges…