Cyber Threat Hunter

Stratascorp LLC; Chesapeake (VA); Presencial; USD 88 000 - 91 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Medical, dental, and vision insurance

401(k) with company match

Paid time off

Resumo da oferta

StratasCorp in Chesapeake, VA is seeking a Security Operations Center (SOC) Analyst – Cyber Threat Hunter to monitor, detect, analyze, and respond to cybersecurity threats targeting the MSC network environment. You will work with intrusion detection systems, SIEMs, and packet capture tools to identify emerging threats and support timely mitigation.

This on-site, full-time role requires an Active Secret clearance, strong analytical skills, and the ability to operate in a fast-paced security

Qualificações

• Active Secret Clearance required.
• Experience with CSSP or DoD environments preferred.
• Ability to analyze alerts, traffic, and logs to identify threats.
• Strong attention to detail and problem solving.
• Experience with IDS/IPS, SIEM, and packet capture tools.

Responsabilidades

• Monitor CSSP intrusion detection and prevention operations.
• Analyze real-time security alerts and network sessions.
• Operate IDS/IPS and packet capture tools to support monitoring.
• Triage alerts and assess impact of threats.
• Document investigations and escalate as needed.
• Coordinate with SOC team and report significant findings.

Conhecimentos

Security monitoring

SIEM tools

Threat hunting

Packet capture

IDS/IPS

Network analysis

Analytical thinking

Team collaboration

Formação académica

High school diploma or equivalent

Ferramentas

Wireshark

WinDump

TCPDump

SIEM platforms

Descrição da oferta de emprego

At StratasCorp, our mission strives to put employees first while still being recognized as a leader in the Department of Defense Information Technology sector. We believe in a continuing pursuit of customer satisfaction and operational excellence while excelling in service innovation. We are looking for employees who value corporate culture, leadership, diversity, and commitment to quality, because we are #TeamStratas.

Location

Chesapeake, VA - Chesapeake, VA 23320 US (Primary)

Category

Information Technology

Job Description

The Security Operations Center (SOC) Analyst - Cyber Threat Hunter supports the monitoring, detection, analysis, and response to cybersecurity threats targeting the Military Sealift Command (MSC) network environment. This position supports Cyber Security Service Provider (CSSP) operations by conducting real-time security monitoring, analyzing network traffic, investigating alerts, and identifying potential malicious activity to maintain an active defense security posture.

The SOC Analyst will leverage intrusion detection and prevention systems, packet capture tools, Security Information and Event Management (SIEM) platforms, and other cybersecurity technologies to identify emerging threats, assess potential impacts, and support timely mitigation. The successful candidate will apply technical analysis and threat-hunting techniques to identify suspicious network activity, improve detection capabilities, and help protect critical network infrastructure.

This position requires strong analytical and troubleshooting skills, attention to detail, and the ability to operate effectively in a security-focused operational environment.

Location: Chesapeake, Virginia
Work Arrangement: On-site
Position Type: Full-Time
Clearance: Active Secret

Key Responsibilities

Security Monitoring and Threat Detection

• Support day-to-day Cyber Security Service Provider (CSSP) intrusion detection and prevention operations.
• Conduct tactical, real-time monitoring and analysis of security alerts, network sessions, statistical data, and full packet captures to identify suspicious activity and potential cybersecurity threats.
• Operate and monitor intrusion-sensing, network traffic analysis, and packet capture tools to support continuous monitoring of MSC networks.
• Monitor SIEM platforms and CSSP security tools to identify anomalous behavior, indicators of compromise, and potential security incidents.
• Examine and triage security alerts to determine the nature, severity, scope, and potential impact of identified threats.
• Identify patterns of malicious activity and support proactive threat-hunting efforts to detect threats that may evade traditional security controls.

Network Traffic Analysis and Incident Investigation

• Analyze network traffic, packet captures, session data, and security logs to investigate suspicious activity and potential intrusions.
• Utilize tools such as Wireshark, WinDump, and TCPDump to capture, inspect, and analyze network communications.
• Correlate data from multiple security monitoring sources to identify attack patterns, establish relationships between events, and support incident investigations.
• Conduct strategic analysis of Intrusion Detection System/Intrusion Prevention System (IDS/IPS) data to identify emerging threats, recurring security events, and opportunities to improve detection.
• Document investigative findings and elevate confirmed or suspected threats in accordance with established security procedures.
• Support the identification of threat indicators, attack techniques, and potential vulnerabilities affecting the MSC network environment.

Security Tool Configuration and Optimization

• Monitor and maintain intrusion-sensing and security monitoring technologies to support effective threat detection and prevention.
• Assist with updating and configuring CSSP security devices, including the implementation of current detection signatures and heuristic techniques.
• Evaluate security alerts and detection performance to identify gaps in monitoring coverage and opportunities to improve threat identification.
• Support the ongoing refinement of IDS/IPS configurations and detection capabilities in response to emerging threats and changing operational requirements.
• Apply established procedures and technical guidance to maintain the effectiveness and reliability of security monitoring tools.

Operational Coordination and Reporting

• Coordinate with SOC team members and other technical personnel to investigate security events and support incident response activities.
• Communicate significant findings, potential threats, and escalated incidents to appropriate personnel.
• Maintain accurate documentation of security alerts, investigative activities, analysis results, and incident escalations.
• Support continuous improvement of SOC monitoring, threat detection, and incident analysis processes.
• Perform additional cybersecurity monitoring and operational duties as assigned to support mission requirements.

Required Qualifications

• High school diploma or equivalent.
• Active Secret Clearance.
• Foundational knowledge of cybersecurity concepts, network security, intrusion detection, and intrusion prevention.
• Ability to analyze security alerts, network traffic, and log data to identify suspicious or potentially malicious activity.
• Familiarity with network protocols, packet capture analysis, and common cybersecurity monitoring techniques.
• Strong analytical, troubleshooting, and problem‑solving skills.
• Attention to detail and the ability to recognize unusual patterns or anomalies in network activity.
• Ability to document technical findings clearly and communicate security concerns effectively.
• Ability to work collaboratively in a team‑oriented, security operations environment.
• Ability and willingness to work on‑site in Chesapeake, Virginia.

Preferred Qualifications

• Experience supporting a Security Operations Center (SOC), Cyber Security Service Provider (CSSP), or similar cybersecurity operations environment.
• Experience with IDS/IPS platforms, SIEM tools, and network intrusion monitoring technologies.
• Hands‑on experience using Wireshark, WinDump, TCPDump, or comparable packet capture and network analysis tools.
• Experience analyzing full packet captures, session data, security alerts, and network traffic patterns.
• Familiarity with threat hunting, security event correlation, incident triage, and cybersecurity incident response.
• Experience updating intrusion detection signatures, configuring security monitoring tools, or applying heuristic detection techniques.
• Familiarity with enterprise network environments and security monitoring requirements in a government or Department of Defense (DoD) setting.

Work Environment

This is an on‑site position based in Chesapeake, Virginia, supporting cybersecurity monitoring and defense operations for the Military Sealift Command network environment. The SOC Analyst will work in a collaborative operational setting focused on continuous threat monitoring, network traffic analysis, intrusion detection, and maintaining the security and integrity of mission‑critical network systems.

Compensation and Benefits

The anticipated salary range for this role is $88,000 to $91,000 annually. The anticipated salary range for this position is provided in accordance with applicable pay transparency laws. The final starting salary will be determined based on a variety of job‑related factors, including the selected candidate's qualifications, skills, relevant experience, education, certifications, and work location (where applicable), as well as internal equity and market considerations.

StratasCorp provides a complete compensation package with competitive wages and benefits that include medical, dental, and vision insurance, FSA & HSA accounts, disability and other income protection benefits, life insurance, paid personal time‑off benefits, paid holidays, and a 401K Saving Plan with a company matching contribution.

Equal Opportunity Statement

StratasCorp is committed to equal opportunity in employment, actively seeking to build a diverse and talented workforce, including individuals with disabilities and protected veterans.

Additional Information

We use E-Verify to confirm the identity and employment eligibility of all new hires.