Cyber Threat Hunter & Incident Response Pro

Sarela Technology Solutions LLC; Columbus, Northern (OH, KY); Ibrido; USD 120.000 - 180.000; Tempo pieno

Vantaggi offerti da questo lavoro

401(k)

401(k) matching

Dental insurance

Health insurance

Paid time off

Profit sharing

Training & development

Tuition assistance

Vision insurance

Descrizione del lavoro

SarelaTech is seeking an experienced Cybersecurity Threat Hunter to support a Department of War cybersecurity mission. The role will proactively search for threats within the network and initiate investigations when unusual behavior is detected.

You will analyze logs and network data, collaborate with Threat Detection and Incident Response teams, and develop threat-hunting strategies and automation. Active TS clearance required.

Competenze

• Five (5) years of technical experience in Threat Intelligence, IR, Pentest, RE, or DF.
• Three (3) years analyzing attacker techniques across attack levels.
• Experience with multiple operating systems.
• Ability to work with large data sets.
• Experience turning threat intel into actionable information.
• Knowledge of MITRE ATT&CK framework.
• Narrate threat-hunting operations with data.

Mansioni

• Analyze raw log and network data for threat hunting leads.
• Cross-reference trends with threat intelligence to detect anomalies.
• Identify mitigations for vulnerabilities found during hunts.
• Develop hunting tools and automation to catch advanced adversaries.
• Perform incident response for critical security incidents.

Conoscenze

Threat intelligence

Incident response

Penetration testing

Reverse engineering

Digital forensics

Data analysis

MITRE ATT&CK

Threat hunting

Scripting: Python/PowerShell

Strumenti

Splunk

Python

PowerShell

Descrizione del lavoro

SarelaTech is seeking an experienced Cybersecurity Threat Hunter to support a Department of War cybersecurity mission. The role will proactively search for threats within the network and initiate investigations when unusual behavior is detected.

You will analyze logs and network data, collaborate with Threat Detection and Incident Response teams, and develop threat-hunting strategies and automation. Active TS clearance required.