CYBERSECURITY THREAT HUNTER

Confidential; United States; À distance; USD 140 000 - 190 000; Plein temps

Résumé du poste

Confidential is seeking a senior cyber threat hunter to proactively search for undetected threats within networks, initiate investigations, and collaborate with Threat Detection and Incident Response teams to generate hunting leads. The role focuses on turning threat intelligence into actionable information and relies on experience across OS environments.

The candidate will develop hunting strategies, build tools and automation, and lead incident response for critical security incidents,

Qualifications

• Five+ years in Threat Intelligence, Cybersecurity Incident Response, Penetration Testing, Reverse Engineering or Digital Forensics.
• Three+ years analyzing attacker techniques at all levels of attack.
• Experience with security challenges across multiple operating systems.

Responsabilités

• Searches for cyber threats undetected within the network and initiates investigations.
• Analyzes logs and network data with Threat Detection and Incident Response analysts to generate hunting leads.
• Develops threat hunting strategies and builds automation to identify sophisticated adversaries.
• Performs incident response for critical security incidents.

Connaissances

Threat intelligence

Cybersecurity incident response

Penetration testing

Reverse engineering

Digital forensics

Outils

Splunk

Python

PowerShell

Description du poste

Proactively searches for cyber threats that exist undetected within the network. Initiates investigations to identify unusual behavior indicative of malicious activity with the assumption that a threat actor already resides within the network. Analyzes raw log and network data as well as working with Threat Detection and Incident Response analysts to generate hunting leads. Cross-reference trends and activity within the enterprise environment with current threat intelligence regarding external trends. Identifies mitigations for key vulnerabilities identified during threat as well as taking the lead on analysis if an APT or other compromise is identified while performing hunting. Develops threat hunting strategies to increase capabilities for finding new threats. Builds hunting tools and automation capabilities to identify sophisticated adversaries. Performs incident response for critical security incidents.

Minimum Requirements:

• Five (5) years of technical experience in one of the following areas: Threat Intelligence, Cybersecurity Incident
  Response, Penetration Testing, Reverse Engineering, Digital Forensics
• Three (3) years of experience analyzing attacker techniques at all levels of attack.
• Knowledge of security challenges in multiple Operating Systems (OS)
• Ability to work with large data sets.
• Experience using tools and scripting languages such as Splunk, Python & PowerShell.
• Ability to turn Threat Intelligence into actionable information.
• Knowledge of MITRE ATT&CK framework
• Capable of using data to build a narrative to support documentation of hunting operations.
• Must possess a current DOD Top Secret Clearance and be eligible for an IT-I Critical Sensitive security clearance or Tier 5 (T5) at time of proposal submission.

For more information email [e-mail] or call 301-363-2199.