Cyber Threat Hunter & Incident Response Lead

iP-Plus Consulting, Inc.; Columbus (OH); On-site; USD 110,000 - 150,000; Full time

Job summary

iP-Plus Consulting, Inc. proactively hunts for cyber threats undetected in the network and initiates investigations to identify unusual behavior signaling malicious activity.

Collaborating with Threat Detection and Incident Response teams, you will generate hunting leads and apply MITRE ATT&CK to translate Threat Intelligence into actionable insights while building automation to outpace adversaries.

Qualifications

• Five (5) years of technical experience in Threat Intelligence, Cybersecurity Incident Response, Penetration Testing, Reverse Engineering or Digital Forensics.
• Three (3) years of experience analyzing attacker techniques at all levels of attack.
• Knowledge of security challenges in multiple Operating Systems (OS).
• Ability to work with large data sets.
• Experience using tools and scripting languages such as Splunk, Python & PowerShell.
• Ability to turn Threat Intelligence into actionable information.
• Knowledge of MITRE ATT&CK framework.
• Capable of using data to build a narrative to support documentation of hunting operations.
• Must possess a current DOD Top Secret Clearance and be eligible for an IT-I Critical Sensitive security clearance or Tier 5 (T5).

Responsibilities

• Proactively searches for cyber threats that exist undetected within the network.
• Initiates investigations to identify unusual behavior indicative of malicious activity.
• Analyzes raw log and network data and collaborates with Threat Detection and Incident Response analysts to generate hunting leads.
• Cross-references trends and activity with current threat intelligence.
• Identifies mitigations for key vulnerabilities identified during threat hunting.
• Leads analysis if an APT or other compromise is identified.
• Develops threat hunting strategies to increase capabilities for finding new threats.
• Builds hunting tools and automation capabilities to identify sophisticated adversaries.
• Performs incident response for critical security incidents.

Skills

Threat Intelligence

Cybersecurity Incident Response

Penetration Testing

Reverse Engineering

Digital Forensics

Attacker techniques analysis

Multi-OS security

Big data analysis

Threat intelligence to actionable info

MITRE ATT&CK

Data-driven storytelling

Tools

Splunk

Python

PowerShell

Job description

iP-Plus Consulting, Inc. proactively hunts for cyber threats undetected in the network and initiates investigations to identify unusual behavior signaling malicious activity.

Collaborating with Threat Detection and Incident Response teams, you will generate hunting leads and apply MITRE ATT&CK to translate Threat Intelligence into actionable insights while building automation to outpace adversaries.