SOC Threat Hunter / Splunk Architect (Purple Team Focus)

SOC Threat Hunter / Splunk Architect (Purple Team Focus) Location :

• Fort Meade, MD  | Type : Full-Time | Clearance : TS / SCI CI polygraph required Overview DarkStar Intelligence is seeking a SOC Threat Hunter / Splunk Architect to support advanced Defensive Cyber Operations.
• This hybrid role merges SOC engineering, threat hunting, and purple team operations.
• You’ll help shape detection strategy, simulate adversary behavior, and respond to real-world threats supporting national security objectives at Fort Meade.
• Key Responsibilities Architect and tune Splunk dashboards and alerting rules to improve detection fidelity.
• Develop and optimize custom sensors to reduce false positives and improve SOC efficiency.
• Conduct threat hunting and purple team operations , including adversary simulation and detection validation.
• Perform digital forensics and incident response (DFIR), including evidence collection and timeline analysis.
• Conduct network traffic analysis , including packet inspection and anomaly detection.
• Collaborate with red teams to align detection capabilities with adversary tradecraft.
• Brief leadership on sensor performance, threat posture, and findings.

Minimum Qualifications Clearance :

Compensation & Benefits Salary Range :

Additional Details Travel :

We prioritize both client satisfaction and employee retention, delivering high-quality, intelligence-based solutions grounded in our “Core Four” values :

Passion :

Agility :

Ownership :

We prohibit discrimination in all aspects of employment—including hiring, compensation, promotion, training, discipline, and termination—on the basis of :

EEO Flyer :

Core Benefits for employees :