Cyber Defense Threat Hunting Analyst

Resource Management Concepts, Inc.; Quantico (VA); On-site; USD 125,000 - 145,000; Full time

Benefits offered by this job

Relocation assistance

Health insurance

401K

Paid vacation

11 federal holidays

Pet insurance

Tuition assistance

Job summary

Resource Management Concepts, Inc. seeks a Cyber Defense Threat Hunting Analyst to execute defensive operations, detect APTs, and mitigate threats within the DoD enterprise network.

You will leverage MITRE ATT&CK, Active Directory, and PowerShell to identify adversary activity and improve detection capabilities. The role requires TS/SCI clearance, DODD 8570 IAT III and CSSP Analyst certifications, and a technical degree or equivalent experience.

Qualifications

• Requires TS/SCI clearance with ability to obtain access
• Bachelor's degree in a technical field or equivalent experience
• DOD 8570 IAT Level III and CSSP Analyst certifications required or equivalent
• Experience with threat hunting, incident response, and cyber defense operations

Responsibilities

• Threat hunting and mitigation across enterprise systems
• Detection and analysis using MITRE ATT&CK, AD, and PowerShell
• Support Red Team exercises to improve detection
• Research and develop new APT TTPs for improved defenses
• Create detection use cases and document findings for ITSM tickets
• Provide training and update TTPs and materials annually
• Assist in CSSP accreditation and DoD 8530.01-M compliance

Skills

Threat hunting

Incident response

Detection & analysis

Research & development

Training & documentation

Compliance & accreditation

Communication skills

Education

DODD 8570 IAT Level III Certification

DODD 8570 CSSP Analyst Certification

College degree in a technical discipline

7+ years cyber defense without degree

Tools

MITRE ATT&CK framework

Active Directory

PowerShell

Job description

Resource Management Concepts, Inc. (RMC) provides high-quality, professional services to government and commercial sectors. Our mission is to deliver exceptional management and technology solutions supporting the protection and preservation of the people and environment of the United States of America.

We are seeking a highly skilled Cyber Defense Threat Hunting Analyst to join our Cyber Defense Team. In this critical role, you will execute defensive cyber counter-infiltration operations to detect and mitigate Advanced Persistent Threats (APT) within the DoD customer’s enterprise network. This position involves leveraging cutting-edge tools and methodologies to protect mission-critical systems while maintaining compliance with DoD cybersecurity requirements.

This is a unique opportunity to work on advanced defensive cyber operations, contributing directly to national security by protecting enterprise networks from sophisticated threats. You will be part of an elite team, leveraging state-of-the-art tools and methodologies to stay ahead of adversaries.

Key Responsibilities

• Threat Hunting and Mitigation:Conduct proactive threat hunting operations, identifying and neutralizing Advanced Persistent Threats (APTs) across enterprise systems.
• Detection and Analysis:Assess servers, hosts, and network devices to detect adversary activity, leveraging tools such as the MITRE ATT&CK® Framework, Active Directory, and PowerShell.
• Incident Response:Support Red Team (penetration testing) exercises to demonstrate and enhance detection and mitigation capabilities.
• Research and Development:Analyze and identify new APT Tactics, Techniques, and Procedures (TTPs) to continuously improve the Hunt Team’s effectiveness.
• Capability Improvement:Create new detection use cases and identify gaps in detection capability, documenting findings and submitting ITSM trouble tickets as needed.
• Training and Documentation:
  • Update Cyber Hunt tactics, techniques, procedures, and training materials annually.
  • Prepare and deliver at least two training sessions annually, achieving a minimum 90% satisfaction rating from attendees.
• Compliance Support:Assist in maintaining the Government’s CSSP accreditation by providing technical documentation and adhering to DOD 8530.01-M standards.

• Active Top Secret (TS) with SCI security clearance required; must be able to obtain and maintain access eligibility as a condition of employment.
• Education and Certification:
  • Required:DODD 8570 IAT Level III Certification (e.g., CISSP, CASP+, SecX)
  • Required:DODD 8570 CSSP Analyst Certification (e.g., CEH, CySA+)
  • College degree in a technical related discipline.
  • Without college degree, greater than seven years’ experience in a cyber defense, cybersecurity, or information technology field.
• Experience:
  • Demonstrated expertise in threat hunting, incident response, or related cyber defense operations.
  • Familiarity with tools like MITRE ATT&CK® Framework, Active Directory and PowerShell.
  • Knowledge of Advanced Persistent Threat (APT) behaviors and TTPs.
• Skills:
  • Strong problem-solving abilities and attention to detail.
• Excellent communication and presentation skills for training and collaboration

At RMC, we're committed to your career growth! RMC differentiates itself from other firms through its investment in our employees. We invest our resources to train, certify, educate, and build our employees.

RMC can offer you a great place to work with a small company feel and give you the experience, tuition assistance, and certifications that will take your career to the next level. We offer Monday to Friday full-time day shift work, and can assist in paid relocation. This also includes a competitive paid vacation package with 11 paid federal holidays. Additionally, we also offer high-quality, low-deductible healthcare plans, pet insurance, and a competitive 401K package.

Salary at RMC is determined by various factors, including but not limited to location, a candidate's specific combination of education, knowledge, skills, competencies, and experience, as well as contract-specific requirements. The current salary range for this position will be $125,000 to $145,000 (annually).