The Opportunity: 
We are seeking an experienced Technical Project Manager to join our Security Operations Center (SOC) team to lead advanced threat and research functions. This role leads advanced analytics, threat hunting, cyber threat intelligence, malware analysis, and forensic support across all customer enterprise environments, including on‑prem, zero trust, and cloud environments.     
 
The Threat and Research (T&R) Lead serves as the primary operational, analytical, and strategic coordinator for T&R functions and is the designated point of contact for escalations, reporting, inter‑team coordination, and alignment with customer cybersecurity directives. The T&R Lead will guide proactive and innovative approaches to identifying, mitigating, and investigating advanced threats targeting networks, systems, and mission spaces. The role requires deep technical expertise, strong leadership, and the ability to communicate complex findings to senior executives, cybersecurity leadership, and technical teams across the enterprise. The T&R Lead will support SOC consolidation, Intake, and SOC Services activities, lead proactive threat hunting activities across environments to detect advanced and emerging cyber threats, oversee the optimization of the Threat Intelligence Platform for automated ingestion, enrichment, and distribution, and lead advanced malware analysis, reverse engineering efforts, and malicious code investigations. This role requires participation in a periodic on‑call rotation and timely response to incidents as they arise.

Join us. The world can't wait.

You Have:  

• 10+ years of experience with cybersecurity in threat hunting, threat intelligence, malware analysis, digital forensics, or SOC operations 

• Experience leading advanced cyber threat research efforts in enterprise environments 
• Experience with Splunk, including complex queries, dashboards, and content development, endpoint detection platforms, including CrowdStrike, Microsoft Defender, or FireEye MX, packet capture analysis, and forensic tools

• Experience with threat intelligence platforms, including MISP, and SIEM integration
• Knowledge of CNE and CNA tools and tradecraft along with signatures, tactics, techniques, and procedures associated with preparation for and execution and implementation of such attacks
• Knowledge of adversary TTPs, cyber kill chains, threat modeling frameworks, including MITRE ATT&CK, STRIDE, or PASTA, and nation-state threat actors

• Ability to draft high-quality reports, briefings, technical assessments, and executive summaries
• Top Secret clearance

• Bachelor’s degree  

Nice If You Have:  

• Experience coordinating with government agencies and Intelligence Community partners
• Experience with ServiceNow or similar ticketing systems 

• Ability to write and deliver succinct briefings, presentations, and reports to convey analysis, threat trends, threat actor profiles, indicator bulletins, vulnerability details and defensive strategies to varied audiences

• Knowledge of current and emerging cyber adversaries and their techniques, tactics, and procedures (TTPs)
• CISSP, GCTI, GCIA, GCIH, CEH, CTIA, or equivalent certification

Clearance: 
Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; Top Secret clearance is required.

Compensation

At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen’s benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page.

Identity Statement

As part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during interviews and assessments. We reserve the right to take your picture to verify your identity and prevent fraud.

Candidate AI Usage Policy

AI is a part of our daily work at Booz Allen, and we are committed to the responsible and ethical use of AI tools. However, we want to ensure a fair candidate process based on your own skills and knowledge. As part of this commitment, the use of artificial intelligence (AI) or other tools to assist with responses during interviews (whether in-person or virtual) is prohibited unless permission is explicitly provided.

Work Model
Our people-first culture prioritizes the benefits of collaboration. To support engagement and effective communication, employees working virtually are generally expected to have their cameras on during meetings.

• Remote: If this position is listed as remote, there may still be occasions when you are required to work in person at a Booz Allen or customer facility.
• Hybrid: If this position is listed as hybrid, you will be expected to work from a Booz Allen or customer facility, in alignment with your leadership's expectations and the needs of the role.
• Onsite: If this position is listed as onsite, work will primarily be performed full-time at a customer facility, where employees will collaborate directly with colleagues and customers as required by the role.

Commitment to Non-Discrimination

All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, local, or international law.