Cybersecurity Threat Hunter

electro soft; Columbus (OH); On-site; USD 150,000 - 160,000; Full time

Job summary

Electrosoft Services, LLC is seeking a Cybersecurity Threat Hunter to proactively search for threats within the network and lead investigations into unusual activity. The role collaborates with Threat Detection and Incident Response teams to analyze logs and network data, while developing hunting strategies and automation to identify sophisticated adversaries.

The position requires five years of technical experience in related fields, three years in attack technique analysis, OS security

Qualifications

• Five years of technical experience in Threat Intelligence, Incident Response, Penetration Testing, Reverse Engineering or Digital Forensics.
• Three years of experience analyzing attacker techniques across all levels of attack.
• Knowledge of security challenges across multiple operating systems.
• Experience working with large data sets.
• Proficiency with Splunk, Python and PowerShell.
• Must hold a current DoD Top Secret Clearance; eligible for IT-I/T5 clearance.

Responsibilities

• Proactively hunts for threats and investigates unusual activity.
• Analyzes raw logs and network data with Threat Detection and Incident Response teams.
• Develops threat hunting strategies and builds automation tools.
• Performs incident response for critical security incidents.

Skills

Threat Intelligence

Incident Response

Threat Hunting

Penetration Testing

Digital Forensics

Reverse Engineering

MITRE ATT&CK

Data Analysis

Tools

Splunk

Python

PowerShell

Job description

Electrosoft Services, LLC is an award-winning company that provides comprehensive technology-based solutions and services to federal customers. While cybersecurity is our specialty, we also focus on ICAM, Zero Trust, digital engineering and transformation, and enterprise AI and intelligent automation. We always seek to delight our customers, so we retain highly qualified employees and offer them meaningful work, growth opportunities, and work-life balance. What sets us apart from all other contractors is the sense of teamwork our employees feel – and the knowledge that outstanding effort is recognized and rewarded. The camaraderie we share emanates from Lunch & Learn sessions where we explore new ideas together, fun group activities ranging from escape rooms to miniature golf, and much, much more. If we’ve described you and your dream workplace, please apply and share in the many benefits and opportunities we offer.

Cybersecurity Threat Hunter

Proactively searches for cyber threats that exist undetected within the network. Initiates investigations toidentify unusual behavior indicative of malicious activity with the assumption that a threat actor already resides within the network. Analyzes raw log and network data as well as working with Threat Detection and Incident Response analysts to generate hunting leads. Cross-reference trends and activity within the enterprise environment with current threat intelligence regarding external trends. Identifies mitigations for key vulnerabilities identified during threat as well as taking the lead on analysis if an APT or other compromise is identified while performing hunting. Develops threat hunting strategies to increase capabilities for finding new threats. Builds hunting tools and automation capabilities to identifysophisticated adversaries. Performs incident response for critical security incidents.

The actual base salary offered will be determined based on a variety of factors, including, but not limited to, the candidate’s relevant years and depth of experience, skills and qualifications, education, certifications, internal equity, and the specific requirements of the position. Candidates should not assume they will be offered the top of the posted range, as compensation is based on the individual qualifications and overall fit for the role.

Minimum Requirements:

• Five (5) years of technical experience in one of the following areas: Threat Intelligence, Cybersecurity Incident Response, Penetration Testing, Reverse Engineering, Digital Forensics
• Three (3) years of experience analyzing attacker techniques at all levels of attack.
• Knowledge of security challenges in multiple Operating Systems (OS)
• Ability to work with large data sets.
• Experience using tools and scripting languages such as Splunk, Python & PowerShell.
• Ability to turn Threat Intelligence into actionable information.
• Knowledge of MITRE ATT&CK framework
• Capable of using data to build a narrative to support documentation of hunting operations.
• Must possess a current DOD Top Secret Clearance and be eligible for an IT-I Critical Sensitive security clearance or Tier 5 (T5) at time of proposal submission.

Salary Range $150,000 — $160,000 USD

Electrosoft is an Equal Opportunity Employer/Veterans/Disabled