Cybersecurity Threat Hunter New Columbus, OH

Electrosoft; Columbus (OH); Hybrid; USD 105,000 - 145,000; Full time

Job summary

Electrosoft Services, LLC is an award-winning contractor delivering cybersecurity, ICAM, Zero Trust, and AI-driven solutions to federal customers. The Cybersecurity Threat Hunter role proactively hunts threats, analyzes data, and collaborates with Response teams to mitigate risks.

Clear understanding of MITRE ATT&CK and OS security is essential, with a TS clearance or eligibility for IT-I/T5. Join a team recognized for growth, work-life balance, and opportunities to expand capabilities with

Qualifications

• Five years of technical experience in Threat Intelligence, Incident Response, Penetration Testing, Reverse Engineering or Digital Forensics.
• Three years of experience analyzing attacker techniques across all levels of attack.
• Knowledge of MITRE ATT&CK framework and OS security challenges.

Responsibilities

• Proactively searches for cyber threats that may be undetected in the network.
• Initiates investigations to identify unusual behavior indicating malicious activity.
• Analyzes raw logs and network data; collaborates with Threat Detection and IR teams.
• Develops threat hunting strategies and builds automation to find new threats.
• Performs incident response for critical security incidents.

Skills

Threat Intelligence

Incident Response

Penetration Testing

Reverse Engineering

Digital Forensics

MITRE ATT&CK

Tools

Splunk

Python

PowerShell

Job description

Electrosoft Services, LLC is an award-winning company that provides comprehensive technology-based solutions and services to federal customers. While cybersecurity is our specialty, we also focus on ICAM, Zero Trust, digital engineering and transformation, and enterprise AI and intelligent automation.We always seek to delight our customers, so we retain highly qualified employees and offer them meaningful work, growth opportunities, and work-life balance. What sets us apart from all other contractors is the sense of teamwork our employees feel – and the knowledge that outstanding effort is recognized and rewarded.The camaraderie we share emanates from Lunch & Learn sessions where we explore new ideas together, fun group activities ranging from escape rooms to miniature golf, and much, much more.

Cybersecurity Threat Hunter

Proactively searches for cyber threats that exist undetected within the network. Initiates investigations toidentify unusual behavior indicative of malicious activity with the assumption that a threat actor already resides within the network. Analyzes raw log and network data as well as working with Threat Detection and Incident Response analysts to generate hunting leads. Cross-reference trends and activity within the enterprise environment with current threat intelligence regarding external trends. Identifies mitigations for key vulnerabilities identified during threat as well as taking the lead on analysis if an APT or other compromise is identified while performing hunting. Develops threat hunting strategies to increase capabilities for finding new threats. Builds hunting tools and automation capabilities to identifysophisticated adversaries. Performs incident response for critical security incidents.

• Five (5) years of technical experience in one of the following areas: Threat Intelligence, Cybersecurity Incident Response, Penetration Testing, Reverse Engineering, Digital Forensics
• Three (3) years of experience analyzing attacker techniques at all levels of attack.
• Knowledge of security challenges in multiple Operating Systems (OS)
• Ability to work with large data sets.
• Experience using tools and scripting languages such as Splunk, Python & PowerShell.
• Ability to turn Threat Intelligence into actionable information.
• Knowledge of MITRE ATT&CK framework
• Capable of using data to build a narrative to support documentation of hunting operations.
• Must possess a current DOD Top Secret Clearance and be eligible for an IT-I Critical Sensitive security clearance or Tier 5 (T5) at time of proposal submission.

Electrosoft is an Equal Opportunity Employer/Veterans/Disabled

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self-identification survey.Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiringprocess or thereafter. Any information that you do provide will be recorded and maintained in aconfidential file.

As set forth in Electrosoft’s Equal Employment Opportunity policy,we do not discriminate on the basis of any protected group status under any applicable law.

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection.As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measurethe effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categoriesis as follows:

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.

A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.