Revolutional delivers advanced technology solutions and mission support to federal agencies across civilian, health, and national security environments. We apply modern capabilities, including AI/ML, cloud, cybersecurity, and IT modernization to solve complex challenges, enable faster and more secure operations, and drive measurable mission outcomes. We are redefining how federal technology gets built and delivered by operating with a product mindset, prioritizing speed, ownership, and execution over bureaucracy.

Title: Senior Threat Hunter Location: Washington, DC or Chandler, AZ Terms: Full-time Salary: $135-$175k DOE Clearance: Secret eligibility Travel: 0-20% Position Description As a Senior Threat Hunter at Revolutional, you go looking for threats that automated tools miss. You proactively hunt for Advanced Persistent Threats and adversary activity across enterprise network environments — using network flow, PCAP, logs, sensors, and endpoint data — before they manifest as confirmed incidents. You are technically deep, analytically rigorous, and creative enough to find what others overlook.

You bring serious data skills: you write scripts, build algorithms, develop SIEM queries, and manipulate large data sets to surface patterns and anomalies. You also lead. You manage hunt operations against tight deadlines, develop reusable hunt tactics that raise the team’s capabilities, and brief findings clearly to technical peers and executive audiences alike.

Responsibilities

Proactively hunt for APTs, adversary TTPs, and indicators of compromise across network flow, PCAP, logs, endpoint telemetry, and sensor data Develop, execute, and document reusable hunt tactics, techniques, and procedures that can be operationalized across the security program Build and maintain SIEM queries, alerts, dashboards, and reports to support hunt operations and improve detection coverage Write scripts in Python, R, SQL, PIG, HIVE, or equivalent languages to automate data collection, manipulation, and analysis workflows Develop algorithms to analyze complex data structures and identify anomalous patterns indicative of adversary activity Apply MITRE ATT CK and D3FEND frameworks to structure hunt hypotheses, map adversary behavior, and recommend defensive improvements Conduct complex malware analysis to understand adversary tools, identify encoding techniques (XOR, Base64, ASCII, Unicode, URL encoding, Uuencode), and extract actionable IOCs Leverage EDR solutions to investigate endpoint activity, identify suspicious behavior, and support hunt and incident response workflows Interpret and fuse data from multiple tool sources into coherent hunt findings and threat assessments Produce clear, well-structured hunt reports and briefings for audiences ranging from technical analysts to executive leadership Develop, update, and maintain standard operating procedures and technical documentation for hunt operations Manage hunt projects and tasks against tight deadlines; provide team leadership and mentorship as needed Stay current on adversary tactics, trends, and emerging threat vectors relevant to the federal enterprise environment What You Bring (

Requirements

) Baseline

Bachelor’s degree in Computer Science, Information Security, or related field; may be substituted with 4 or more additional years of qualifying experience 5 or more years of experience in data hunting, manipulation, and presentation in a security operations or threat intelligence context Experience in a management or team lead capacity, managing projects and tasks against tight deadlines Active Secret clearance; Top Secret/SCI eligibility required Technical Domain Capabilities Demonstrated experience hunting for APTs and adversary activity using network flow, PCAP, log data, and security sensor telemetry Proficiency with SIEM platforms: search language, query development, alert tuning, dashboard creation, and report building Scripting proficiency in one or more of: Python, R, SQL, PI