Cyber Threat Hunter for Federal Security & Detection

Esmcorp; Columbus (OH); On-site; USD 110,000 - 160,000; Full time

Job summary

Enterprise Solutions and Management (ESM) is seeking a Cybersecurity Threat Hunter to support an enterprise-level program within a federal environment. Proactively identifies and investigates cyber threats that may be operating undetected within the network.

You will analyze logs, networks, and threat intelligence to identify malicious activity, collaborate with Threat Detection and Incident Response teams, and help develop hunting strategies and automation to improve detection and response

Qualifications

• Five (5) years of technical experience in Threat Intelligence, Cybersecurity Incident Response, Penetration Testing, Reverse Engineering, Digital Forensic.
• Three (3) years of experience analyzing attacker techniques at all levels of attack.
• Must maintain CSSP Analyst certification by having one of the following or equivalent - (CEH, CFR, GCIA, GCISP).

Responsibilities

• Proactively identifies and investigates cyber threats that may be operating undetected within the network.
• Analyzes raw log, network, and security data to identify unusual activity and potential malicious behavior, collaborating with Threat Detection and Incident Response teams to pursue hunting leads.
• Develops and implements threat hunting strategies, tools, and automation to improve the organization's ability to detect sophisticated adversaries, and provides incident response support for critical security incidents.

Skills

Threat hunting

Log analysis

Incident response

Automation

MITRE ATT&CK

Data analysis

Threat intel

Tools

Splunk

Python

PowerShell

Job description

Enterprise Solutions and Management (ESM) is seeking a Cybersecurity Threat Hunter to support an enterprise-level program within a federal environment. Proactively identifies and investigates cyber threats that may be operating undetected within the network.

You will analyze logs, networks, and threat intelligence to identify malicious activity, collaborate with Threat Detection and Incident Response teams, and help develop hunting strategies and automation to improve detection and response