Cyber Threat Hunter & Incident Response Analyst

Markesman Group; Whitehall (OH); On-site; USD 120,000 - 180,000; Full time

Job summary

Markesman Group is seeking a Cybersecurity Incident Response & Threat Detection Analyst (Ohio) in Whitehall, OH. You will proactively hunt threats, analyze telemetry, and develop leads using threat intel to strengthen defense across enterprise networks.

The role requires hands-on experience across the attack lifecycle, proficiency with Splunk and scripting (Python/PowerShell), and the ability to translate intelligence into actionable defense. A DoD Top Secret clearance is required or eligible.

Qualifications

• 5+ years of technical experience in Threat Intelligence, Cybersecurity Incident Response, Penetration Testing, Reverse Engineering, or Digital Forensics.
• 3+ years analyzing attacker techniques across the attack lifecycle.
• Knowledge of security challenges across multiple operating systems.
• Ability to work with large data sets.
• Experience with Splunk and scripting languages such as Python and/or PowerShell.
• Ability to turn threat intelligence into actionable information.
• Knowledge of the MITRE ATT&CK framework.
• Ability to use technical data to document threat-hunting operations.
• Current DoD Top Secret clearance.
• Eligible for IT-I Critical Sensitive / Tier 5 (T5) at proposal submission.

Responsibilities

• Proactively search for sophisticated cyber threats operating undetected within enterprise networks.
• Analyze raw network, endpoint, log, and security telemetry for unusual or malicious activity.
• Develop threat-hunting leads using cyber threat intelligence and observed enterprise activity.
• Analyze adversary tactics, techniques, and procedures across the attack lifecycle.
• Use MITRE ATT&CK to investigate and characterize adversary behavior.
• Identify Advanced Persistent Threats and other sophisticated malicious activity.
• Develop and refine threat-hunting strategies and methodologies.
• Translate cyber threat intelligence into actionable defensive information.
• Build scripts, tools, and automation to improve threat-hunting capabilities.
• Work closely with Incident Response and Threat Detection teams.
• Identify mitigations for vulnerabilities uncovered during hunting operations.
• Support incident response activities for critical cybersecurity incidents.
• Document hunt operations and build clear investigative narratives from technical data.

Skills

Threat intelligence

Cybersecurity incident response

Threat hunting

Big data analysis

Documentation accuracy

Investigation reporting

MITRE ATT&CK

Threat research

Tools

Splunk

Python

PowerShell

Job description

Markesman Group is seeking a Cybersecurity Incident Response & Threat Detection Analyst (Ohio) in Whitehall, OH. You will proactively hunt threats, analyze telemetry, and develop leads using threat intel to strengthen defense across enterprise networks.

The role requires hands-on experience across the attack lifecycle, proficiency with Splunk and scripting (Python/PowerShell), and the ability to translate intelligence into actionable defense. A DoD Top Secret clearance is required or eligible.