LEAD INFORMATION SECURITY ENGINEER-FEDERAL MB

Lumen is a trusted network for the AI-powered world, and they are seeking a Lead Information Security Engineer to support threat hunting and investigation of malicious activities. The role involves working with advanced security researchers and using AI-enabled tools to identify threats across the internet, contributing to improving investigative efficiency and analytical quality.

Responsibilities:

• Research attacker tools, techniques, and procedures (TTPs) and contribute to analytic approaches that support automated detection
• Work with cyber operators and senior researchers, when requested, to support investigations into cyber threat activity and assist with mitigation guidance
• Support automation of investigations through Python scripting, data analysis, and visualization in Jupyter Notebooks and Grafana
• Build and maintain collaborative relationships with internal intelligence teams, law enforcement, and outside groups
• Support customer RFIs on incidents and emerging threats with guidance from senior team members as needed
• Use approved AI-enabled tools to assist with research, coding, data exploration, documentation, and knowledge discovery while validating outputs through sound analytical judgment
• Contribute to repeatable workflows that combine analyst expertise, automation, and AI-assisted capabilities to improve investigative efficiency and analytical quality

Requirements:

• Candidates must effectively communicate complex domain-specific concepts, ensuring clarity for both technical and non-technical audiences
• Familiarity with adversary capabilities, infrastructure, and techniques, with the ability to apply that knowledge in collaboration with supporting teams and partners
• Experience using OSINT methods for investigation, including discovering novel threats in malware repositories
• Scripting experience with Python and familiarity with large-scale or distributed data analysis concepts
• Experience supporting cyber threat hunting, security investigations, or analysis of suspicious activity using structured data sets
• Familiarity with network-based threats and identifying suspicious behaviors from network telemetry
• Strong analytical thinking and ability to quickly pick up new methods, tools and programming languages
• Willingness to learn new cyber threat research tradecraft and apply unfamiliar data sources, investigative methods, analytic tools, and AI-assisted workflows to mission-focused problems
• User-level experience in a Unix-based environment
• Familiarity with extracting data through SQL
• Strong writing skills to assist in documenting findings and sharing knowledge with technical and non-technical audiences
• Demonstrable knowledge of several of the following areas: cybersecurity concepts, network protocols, firewalls, IDS/IPS systems, cyber threat hunting, malware analysis concepts, cyber threat intelligence, common threat actor TTPs, application security concepts, or cloud security fundamentals
• Ability to develop proficiency in unfamiliar technical domains through foundational analytical skills, self-directed learning, and effective use of AI-assisted research and problem-solving tools
• Ability to use AI-enabled tools responsibly to support technical research, analysis, coding, documentation, and report development while maintaining professional skepticism and analytical rigor
• Ability to review and validate AI-generated outputs before using them in analysis, findings, or recommendations
• This position requires an active TS/SCI security clearance w/ CI Poly
• Previous work experience with Department of Defense (DoD), Intelligence Community, or other government agencies is preferred
• Hands-on experience with Spark, distributed computing, or large-scale data analysis platforms is preferred
• Experience developing automation and analysis in Python-based environments
• Ability to collaborate with peers and senior team members while developing expertise in new technical topics
• Exposure to generative AI, AI-assisted coding, retrieval-augmented analysis, or agent-based workflows in cyber research, threat hunting, or intelligence production is preferred
• Familiarity with analyzing NetFlow data to identify unusual patterns and potential security threats
• Interest in conducting trend analysis to uncover patterns and emerging threats, enabling proactive defense strategies
• Demonstrated curiosity and sound judgment when using AI-enabled tools in mission-focused environments while maintaining data protection requirements, analytical integrity, and human accountability for findings and recommendations