Cybersecurity Threat Hunter

Nisga'a TEK, LLC; Columbus (OH); Sur place; USD 87 000 - 160 000; Plein temps

Avantages offerts par ce poste

Medical Insurance

Dental Insurance

Vision Insurance

401(k) Matching

Paid Time Off

Professional Development

Résumé du poste

Nisga'a Tek, LLC in the United States seeks a Cybersecurity Threat Hunter to proactively search for hidden threats within the network and guide incident response efforts. The role requires deep experience in threat intelligence, MITRE ATT&CK, and data analysis, with a focus on building hunting strategies and automation to protect critical systems.

U.S. citizenship and final clearance eligibility are required, and the position offers a competitive salary plus comprehensive benefits and

Qualifications

• Five years of technical experience in Threat Intelligence, Cybersecurity Incident Response, Penetration Testing, Reverse Engineering, or Digital Forensics
• Three years of experience analyzing attacker techniques across all levels of attack
• Experience using Splunk, Python, and PowerShell
• Capable of using data to build a narrative to support hunting operations documentation
• Current DoD Top Secret Clearance and eligibility for IT-I Critical Sensitive or Tier 5 at proposal submission

Responsabilités

• Analyzes raw log and network data and collaborates with Threat Detection and Incident Response analysts to generate hunting leads
• Cross-reference trends with current threat intelligence regarding external trends
• Identify mitigations for key vulnerabilities identified during hunting and lead analysis if an APT or other compromise is identified
• Develops threat hunting strategies to increase capabilities for finding new threats
• Builds hunting tools and automation to identify sophisticated adversaries
• Performs incident response for critical security incidents
• Performs other duties as needed or required

Description du poste

Overview

Please note that this position is contingent upon the successful award of a contract currently under bid.

Global in service but local in approach, Nisga'a Tek is committed to high-quality service to those who defend us. Nisga'a Tek ensures mission assurance and execution for customers and warfighters. Providing intelligence, IT, cyber security, training, logistics, administrative, acquisition, and background investigation services.

Summary:

The Cybersecurity Threat Hunter will proactively search for cyber threats that exist undetected within the network. Initiates investigations to identify unusual behavior indicative of malicious activity with the assumption that a threat actor already resides within the network.

Responsibilities

Essential Job Functions:

• Analyzes raw log and network data as well as working with Threat
• Detection and Incident Response analysts to generate hunting leads.
• Cross-reference trends and activity within the enterprise environment with current threat intelligence regarding external trends.
• Identifies mitigations for key vulnerabilities identified during threat as well as taking the lead on analysis if an APT or other compromise is identified while performing hunting.
• Develops threat hunting strategies to increase capabilities for finding new threats.
• Builds hunting tools and automation capabilities to identify sophisticated adversaries.
• Performs incident response for critical security incidents.
• Perform other duties as needed or required.

Qualifications

Necessary Skills and Knowledge:

• Knowledge of security challenges in multiple Operating Systems (OS)
• Ability to work with large data sets.
• Ability to turn Threat Intelligence into actionable information.
• Knowledge of MITRE ATT&CK framework
• Analytical skills to resolve issues effectively and efficiently.
• Demonstrated ability to work well with diverse teams and individuals.

Minimum Qualifications:

• Five (5) years of technical experience in one of the following areas: Threat Intelligence, Cybersecurity Incident Response, Penetration Testing, Reverse Engineering, Digital Forensics
• Three (3) years of experience analyzing attacker techniques at all levels of attack.
• Experience using tools and scripting languages such as Splunk, Python & PowerShell.
• Capable of using data to build a narrative to support documentation of hunting operations.
• Must possess a current DOD Top Secret Clearance and be eligible for an IT-I Critical Sensitive security clearance or Tier 5 (T5) at time of proposal submission.

Preferred Qualifications:

• Bachelor's degree in a related field.

Pay and Benefits

The annual salary range for this position is $87,000 to $160,000.

At Goldbelt, we value and reward our team's dedication and hard work. We provide a competitive base salary commensurate with your qualifications and experience. As an employee, you'll enjoy a comprehensive benefits package, including medical, dental, and vision insurance, a 401(k) plan with company matching, tax-deferred savings options, supplementary benefits, paid time off, and professional development opportunities.