Cybersecurity Threat Hunter

About the role

The University of Maryland Global Campus (UMGC) is looking for a Cybersecurity Threat Hunter to join its Information Security team. The role is full-time, exempt regular, pay grade 3.4, hybrid with occasional onsite presence in Adelphi, MD, and focuses on proactively identifying advanced threats and building detection strategies in a hybrid multi-cloud environment.

Key responsibilities

• Lead proactive threat hunting across endpoints, network and cloud environments to detect anomalous behavior and emerging threats.
• Analyze large security logs for malicious patterns and indicators of compromise (IOCs) using SIEM and EDR platforms, supported by threat intelligence feeds.
• Develop and refine hunting hypotheses based on adversary TTPs (e.g., MITRE ATT&CK).
• Collaborate with the Information Security team and others to triage, escalate and respond to threats.
• Design and implement custom detection logic and rules in the SIEM tool.
• Analyze phishing emails, malicious files and other threat artifacts when needed.
• Write documentation, hunting playbooks and knowledge-transfer materials for junior analysts.
• Produce reports on threat assessments with recommendations, and mentor tier 1 engineers.

Required profile

• Bachelor's degree in Cybersecurity, Computer Science, Information Systems or a related field (or equivalent experience).
• At least 6-8 years of cybersecurity experience, including at least 5 years in threat hunting, threat intelligence or incident response.
• Strong analytical and communication skills, able to explain technical findings to technical and non-technical audiences.

Required skills

• Knowledge of adversary TTPs and frameworks such as MITRE ATT&CK.
• EDR, SIEM and threat intelligence platforms.
• Detection logic with scripting/query languages such as PowerShell, Bash or Python.
• Log and packet analysis, endpoint forensics, malware reverse engineering, Windows and Linux internals, and cloud infrastructure (AWS, Azure).

Preferred qualifications

• GCTI, GCIH, GATH or CTIA certifications.
• OSCP or similar offensive security certification.

What we offer

• Salary range of $120,000-$135,000.
• 22 days paid vacation, 15 days sick leave, 3 personal days and 16 paid holidays.
• Health, dental, vision and prescription coverage, life insurance and flexible spending accounts.
• Tuition remission for regular exempt staff, with benefits for spouses and dependents after two years.