Cybersecurity Threat Hunter

Goldbelt Inc.; Columbus (OH); Sur place; USD 87 000 - 160 000; Plein temps

Avantages offerts par ce poste

Medical insurance

Dental insurance

Vision insurance

401(k) match

Paid time off

Résumé du poste

Goldbelt Inc. in the United States seeks a Cybersecurity Threat Hunter to proactively search for threats undetected in networks and initiate investigations into unusual activity.

You will assume that a threat actor resides within the network and work to uncover malicious activity and respond accordingly. You will analyze data, reference threat intel, and develop hunting strategies while collaborating with cross-functional teams.

Qualifications

• Five (5) years of technical experience in Threat Intelligence, Cybersecurity Incident Response, Penetration Testing, Reverse Engineering, or Digital Forensics.
• Three (3) years of experience analyzing attacker techniques at all levels of attack.
• Experience using tools and scripting languages such as Splunk, Python & PowerShell.
• Capable of using data to build a narrative to support documentation of hunting operations.
• Must possess a current DoD Top Secret Clearance and be eligible for an IT-I Critical Sensitive clearance or Tier 5 (T5) at time of proposal submission.

Responsabilités

• Analyzes raw log and network data and works with Threat Detection and Incident Response analysts to generate hunting leads.
• Cross-reference trends and activity with current threat intelligence regarding external trends.
• Identifies mitigations for key vulnerabilities identified during threat hunting and leads analysis if an APT or other compromise is identified.
• Develops threat hunting strategies to increase capabilities for finding new threats.
• Builds hunting tools and automation to identify sophisticated adversaries.
• Performs incident response for critical security incidents.
• Performs other duties as needed or required.

Connaissances

Threat Intelligence

Cybersecurity Incident Response

Data analysis

MITRE ATT&CK

Analytical thinking

Team collaboration

Formation

Bachelor's degree

Bachelor's degree in related field

Outils

Splunk

Python

PowerShell

Description du poste

Overview

Please note that this position is contingent upon the successful award of a contract currently under bid.

Global in service but local in approach, Nisga'a Tek is committed to high-quality service to those who defend us. Nisga'a Tek ensures mission assurance and execution for customers and warfighters. Providing intelligence, IT, cyber security, training, logistics, administrative, acquisition, and background investigation services.

Summary

The Cybersecurity Threat Hunter will proactively search for cyber threats that exist undetected within the network. Initiates investigations to identify unusual behavior indicative of malicious activity with the assumption that a threat actor already resides within the network.

Responsibilities

• Analyzes raw log and network data as well as working with Threat
• Detection and Incident Response analysts to generate hunting leads.
• Cross-reference trends and activity within the enterprise environment with current threat intelligence regarding external trends.
• Identifies mitigations for key vulnerabilities identified during threat as well as taking the lead on analysis if an APT or other compromise is identified while performing hunting.
• Develops threat hunting strategies to increase capabilities for finding new threats.
• Builds hunting tools and automation capabilities to identify sophisticated adversaries.
• Performs incident response for critical security incidents.
• Perform other duties as needed or required.

Qualifications

Necessary Skills and Knowledge

• Knowledge of security challenges in multiple Operating Systems (OS)
• Ability to work with large data sets.
• Ability to turn Threat Intelligence into actionable information.
• Knowledge of MITRE ATT&CK framework
• Analytical skills to resolve issues effectively and efficiently.
• Demonstrated ability to work well with diverse teams and individuals.

Minimum Qualifications

• Five (5) years of technical experience in one of the following areas: Threat Intelligence, Cybersecurity Incident Response, Penetration Testing, Reverse Engineering, Digital Forensics
• Three (3) years of experience analyzing attacker techniques at all levels of attack.
• Experience using tools and scripting languages such as Splunk, Python & PowerShell.
• Capable of using data to build a narrative to support documentation of hunting operations.
• Must possess a current DOD Top Secret Clearance and be eligible for an IT-I Critical Sensitive security clearance or Tier 5 (T5) at time of proposal submission.

Preferred Qualifications

• Bachelor’s degree in a related field.

Pay and Benefits

The annual salary range for this position is $87,000 to $160,000.

At Goldbelt, we value and reward our team's dedication and hard work. We provide a competitive base salary commensurate with your qualifications and experience. As an employee, you'll enjoy a comprehensive benefits package, including medical, dental, and vision insurance, a 401(k) plan with company matching, tax-deferred savings options, supplementary benefits, paid time off, and professional development opportunities.