Cloud Threat Hunter – Remote (DCSA)

ASRC Federal Holding Company; Hanover (MD); Hybrid; USD 115,000 - 135,000; Full time

Job summary

ASRC Federal is hiring a Cloud Threat Analyst to safeguard national security systems through proactive threat hunting and detection. The role supports the DCSA program based out of Hanover, MD, with telework options and occasional on-site requirements.

You will monitor threat intel, analyze datasets, map tactics to MITRE ATT&CK, and collaborate with the CSOC to respond to incidents and perform forensics. A TS/SCI eligible clearance is required.

Qualifications

• 2+ years of system-level cybersecurity experience in one of the following areas.
• Cyber Security Analyst, Incident Response and Threat Hunting as part of a mid to large enterprise red team or threat hunt team.
• Enterprise vulnerability management, endpoint security, or web security within a mid to large enterprise.
• Active Top-Secret Clearance, eligible for TS/SCI.
• Bachelor's degree in Information Security or related field, or equivalent combination of experience.
• Must meet DoD 8140/8570.01-M IAM II or IAT Level II requirements; at least one certification.

Responsibilities

• Monitor and analyze threat intelligence sources to detect emerging threats.
• Collaborate with CSOC to respond to and investigate security incidents; perform forensic analysis.
• Map adversary activity to MITRE ATT&CK framework and develop threat models.
• Develop and implement threat detection techniques and strategies; analyze large datasets to identify patterns.
• Document incidents, response actions, and remediation recommendations for government reporting.

Skills

Read logs

Enterprise operations

NIST/ISO 27001 incident response

MITRE ATT&CK framework

Communication & Collaboration

Education

Bachelor's degree in Information Security or related field

Job description

ASRC Federal is hiring a Cloud Threat Analyst to safeguard national security systems through proactive threat hunting and detection. The role supports the DCSA program based out of Hanover, MD, with telework options and occasional on-site requirements.

You will monitor threat intel, analyze datasets, map tactics to MITRE ATT&CK, and collaborate with the CSOC to respond to incidents and perform forensics. A TS/SCI eligible clearance is required.