Cyber Threat Hunter: Proactive Detection & Response

ASM Research, An Accenture Federal Services Company; Lincoln (NE); On-site; USD 94,000 - 150,000; Full time

Job summary

ASM Research in Lincoln, Nebraska is seeking a Cyber Threat Hunter to proactively defend enterprise environments by analyzing network, endpoint, and log data to identify malicious activity. The role develops baselines, detects anomalies, and investigates adversary tactics to strengthen cyber defense and incident response operations.

The position collaborates with SOC analysts and detection engineers while creating automation to streamline threat-hunting tasks and improve response times.

Qualifications

• Bachelor's degree or equivalent experience in a related field.
• 4+ years in cybersecurity or related security role.
• Ability to perform system analysis across multiple platforms for investigations.
• Strong analytical and problem-solving skills; understanding of adversary TTPs.

Responsibilities

• Conduct proactive threat hunting across networks, endpoints, and datasets to identify and help eradicate advanced threats.
• Analyze logs from multiple sources to detect suspicious behavior and validate threats.
• Establish baseline patterns to improve anomaly detection and investigation accuracy.
• Collaborate with SOC analysts and detection engineers to propose new alerts and monitoring logic.
• Develop automation scripts and workflows to streamline threat hunting and reduce response time.
• Research adversary TTPs and develop investigative leads from threat intelligence.
• Prepare incident documentation and recommendations to improve response maturity.

Skills

Threat hunting

Anomaly detection

Log analysis

Malware analysis

Reverse engineering

Threat intelligence

Incident response

Detection engineering

Education

Bachelor's degree in IT/CS/Cybersecurity or related field

Tools

Ghidra

IDA Pro

Job description

ASM Research in Lincoln, Nebraska is seeking a Cyber Threat Hunter to proactively defend enterprise environments by analyzing network, endpoint, and log data to identify malicious activity. The role develops baselines, detects anomalies, and investigates adversary tactics to strengthen cyber defense and incident response operations.

The position collaborates with SOC analysts and detection engineers while creating automation to streamline threat-hunting tasks and improve response times.