Nov 22nd, 2022
Systems Planning and Analysis, Inc. (SPA) brings a ready team of the right people, processes and unique tools to deliver forward looking solutions to address the nation's critical concerns. We are a professional services provider with a long-standing reputation for unrivaled technical and analytical support to national executive decision makers. Providing timely, objective and cost-effective solutions that maximize performance and minimize risk are critical to impacting important decisions that are made every day.

We have developed multiple models and tools that enable us to perform timely and relevant analysis for our clients in areas such as Optimization, Modeling and Simulation and Data and Decision Analytics. Our tailored design provides customized solutions for our clients to address any problems regardless of scale or complexity.
Alexandria, VA

Systems Planning and Analysis, Inc. (SPA) delivers high-impact, technical solutions to complex national security issues. As we enter our 50th year in business, we are known for continuous innovation for government customers, both long-established and newly acquired, as our capabilities expand around the globe. Our work is state-of-the-art and made possible only through the best personnel, tools, and jobs in the national security business. We are highly collaborative in spirit and practice, and we freely share expertise across SPA in our quest for enduring solutions to critical concerns. Come work with the best!

SPA has an immediate need for a Threat Hunting Analyst to provide contracting services to NATO.


  • Provide subject matter expertise supporting the end-to-end threat hunting process.
  • Develop hypotheses to be used in a threat hunt.
  • Create security tool content such as searches, reports and dashboards to facilitate threat hunting.
  • Perform indepth analysis of suspicious activity to deliver conclusions and recommendations.
  • Review and develop logging configurations to enable a comprehensive threat hunting capability.
  • Develop and document threat hunting procedures.
  • Share the results of threat hunts via presentations and technical reports.


  • A university degree at a nationally recognised/certified University in a technical subject with substantial Information Technology (IT) content and 2 years of specific experience. Exceptionally, the lack of a university degree may be compensated by the demonstration of a candidate’s particular abilities or experience that is/are of interest to NCI Agency; that is, at least 4 years extensive and progressive expertise in the duties related to the function of the post
  • Expert level in at least three of the following areas and a high level of experience in several of the other areas:
    • Cybersecurity threat hunting
    • MITRE ATT&CK Framework
    • Security Incidents Event Management products (SIEM) – e.g.Splunk
    • Splunk Processing Language
    • Network Based Intrusion Detection Systems (NIDS) – e.g.SourceFire, Palo Alto Network Threat Prevention o Host Based Intrusion Detection Systems (HIDS)
    • Sysmon
    • Full Packet Capture systems – e.g. Niksun, RSA/NetWitness
    • Computer security tools (Vulnerability Assessment, Anti-virus, Protocol Analysis, Anti-Virus, Protocol Analysis, Anti-Spyware, etc)
  • Proficiency in Intrusion/Incident Detection and Handling.
  • Comprehensive knowledge of the principles of computer and communications security, networking, and the vulnerabilities of modern operating systems and applications
  • National from one of the 30 NATO Nations
  • In possession of an active National and/or NATO Secret security clearance

  • Industry leading certification in the area of Cybersecurity such as GCFA, GCIA, GNFA.
  • Knowledge and experience in Splunk Enterprise Security suite.
  • A good understanding of Security, Orchestrations, Automation and Response (SOAR) concepts and their benefits to the protection of CIS infrastructures.
  • Knowledge and experience in threat hunting in corporate/government level environment.
  • Strong knowledge of malware families and network attack vectors.
  • Experience in analysis of various threat actor groups, attack patterns and tactics, techniques, and procedures (TTPs), deep analysis of threats across the enterprise by combining security rules, content, policy and relevant datasets.
  • Ability to analyze attack vectors against a particular system to determine attack surface.

More jobs from Systems Planning and Analysis, Inc.:

If you require alternative methods of application or screening, you must approach Systems Planning and Analysis, Inc. directly to request this, as we're not responsible for the employer's application process.

RedHired TIP

For your privacy and protection, when applying to a job online, never give your social security number to a prospective employer, provide credit card or bank account information, or perform any sort of monetary transaction.

By applying to a job using RedHired you are agreeing to comply with and be subject to the RedHired Terms and Conditions for use of our website. To use our website, you must agree with the Terms and Conditions and both meet and comply with their provisions.


All job types

All locations
Brabant wallon
Brussels Hoofdstedelijk Gewest