Cybersecurity Threat Hunter

Nisga'a Tek, LLC; Columbus (OH); On-site; USD 87,000 - 160,000; Full time

Job summary

Nisga'a Tek, LLC is seeking a Cybersecurity Threat Hunter to proactively search for cyber threats and investigate unusual activity within the network. The role requires turning threat intelligence into actionable insights and leading hunting operations when a compromise is identified.

Ideal candidates will have experience in threat intelligence, incident response, and the ability to build hunting tools and automation to detect sophisticated adversaries.

Qualifications

• 5 years of technical experience in Threat Intelligence, Cybersecurity Incident Response, Pen testing or Digital Forensics.
• 3 years of experience analyzing attacker techniques at all levels of attack.
• Experience using Splunk, Python & PowerShell for data analysis and hunting operations.
• Clear ability to build a narrative from data to support hunting activities.

Responsibilities

• Analyze raw logs and network data to identify threats and generate hunting leads.
• Perform incident response for critical security incidents.
• Cross-reference trends with threat intelligence and external risk indicators.
• Develop hunting strategies and automation to detect advanced adversaries.
• Lead analysis during APT or other compromises and document findings.

Skills

Threat hunting

Incident response

Data analysis

MITRE ATT&CK

Analytical thinking

Team collaboration

Education

Bachelor’s degree

Tools

Splunk

Python

PowerShell

Job description

Overview

Please note that this position is contingent upon the successful award of a contract currently under bid.

Overview

Please note that this position is contingent upon the successful award of a contract currently under bid.

Global in service but local in approach, Nisga'a Tek is committed to high-quality service to those who defend us. Nisga'a Tek ensures mission assurance and execution for customers and warfighters. Providing intelligence, IT, cyber security, training, logistics, administrative, acquisition, and background investigation services.

Summary

The Cybersecurity Threat Hunter will proactively search for cyber threats that exist undetected within the network. Initiates investigations to identify unusual behavior indicative of malicious activity with the assumption that a threat actor already resides within the network.

Responsibilities

Essential Job Functions

• Analyzes raw log and network data as well as working with Threat
• Detection and Incident Response analysts to generate hunting leads.
• Cross-reference trends and activity within the enterprise environment with current threat intelligence regarding external trends.
• Identifies mitigations for key vulnerabilities identified during threat as well as taking the lead on analysis if an APT or other compromise is identified while performing hunting.
• Develops threat hunting strategies to increase capabilities for finding new threats.
• Builds hunting tools and automation capabilities to identify sophisticated adversaries.
• Performs incident response for critical security incidents.
• Perform other duties as needed or required.

Qualifications

Necessary Skills and Knowledge

• Knowledge of security challenges in multiple Operating Systems (OS)
• Ability to work with large data sets.
• Ability to turn Threat Intelligence into actionable information.
• Knowledge of MITRE ATT&CK framework
• Analytical skills to resolve issues effectively and efficiently.
• Demonstrated ability to work well with diverse teams and individuals.

Minimum Qualifications

• Five (5) years of technical experience in one of the following areas: Threat Intelligence, Cybersecurity Incident Response, Penetration Testing, Reverse Engineering, Digital Forensics
• Three (3) years of experience analyzing attacker techniques at all levels of attack.
• Experience using tools and scripting languages such as Splunk, Python & PowerShell.
• Capable of using data to build a narrative to support documentation of hunting operations.
• Must possess a current DOD Top Secret Clearance and be eligible for an IT-I Critical Sensitive security clearance or Tier 5 (T5) at time of proposal submission.

Preferred Qualifications

• Bachelor’s degree in a related field.

Pay And Benefits

The annual salary range for this position is $87,000 to $160,000.

At Goldbelt, we value and reward our team's dedication and hard work. We provide a competitive base salary commensurate with your qualifications and experience. As an employee, you'll enjoy a comprehensive benefits package, including medical, dental, and vision insurance, a 401(k) plan with company matching, tax-deferred savings options, supplementary benefits, paid time off, and professional development opportunities.