Cybersecurity Threat Hunter (Ohio)

Markesman LLC; Columbus (OH); On-site; USD 100,000 - 140,000; Full time

Job summary

Markesman LLC in Whitehall, Ohio, is seeking a Cybersecurity Incident Response & Threat Detection Analyst to proactively hunt threats and analyze multivariate telemetry. The role requires experience across threat intelligence, incident response, and threat hunting, with familiarity with MITRE ATT&CK and scripting in Python/PowerShell.

The ideal candidate will work within incident response and threat detection teams to translate intelligence into defensive actions, build automation, and document

Qualifications

• 5+ years of technical experience in Threat Intelligence, Cybersecurity Incident Response, Penetration Testing, Reverse Engineering, or Digital Forensics.
• 3+ years analyzing attacker techniques across the attack lifecycle.
• DoD Top Secret clearance; IT-I Tier 5 eligibility

Responsibilities

• Proactively search for sophisticated cyber threats operating undetected within enterprise networks
• Analyze raw network, endpoint, log, and security telemetry for unusual or malicious activity
• Develop threat-hunting leads using cyber threat intelligence and observed enterprise activity
• Analyze adversary tactics, techniques, and procedures across the attack lifecycle
• Use MITRE ATT&CK to investigate and characterize adversary behavior
• Identify Advanced Persistent Threats and other sophisticated malicious activity
• Develop and refine threat-hunting strategies and methodologies
• Translate cyber threat intelligence into actionable defensive information
• Build scripts, tools, and automation to improve threat-hunting capabilities
• Work closely with Incident Response and Threat Detection teams
• Identify mitigations for vulnerabilities uncovered during hunting operations
• Support incident response activities for critical cybersecurity incidents
• Document hunt operations and build clear investigative narratives from technical data

Skills

Threat intelligence

Incident response

Threat hunting

Data analysis

Scripting (Python/PowerShell)

Tools

Splunk

MITRE ATT&CK

Job description

Cybersecurity Incident Response & Threat Detection Analyst (Ohio) in Whitehall, Ohio

Responsibilities

• Proactively search for sophisticated cyber threats operating undetected within enterprise networks
• Analyze raw network, endpoint, log, and security telemetry for unusual or malicious activity
• Develop threat-hunting leads using cyber threat intelligence and observed enterprise activity
• Analyze adversary tactics, techniques, and procedures across the attack lifecycle
• Use MITRE ATT&CK to investigate and characterize adversary behavior
• Identify Advanced Persistent Threats and other sophisticated malicious activity
• Develop and refine threat-hunting strategies and methodologies
• Translate cyber threat intelligence into actionable defensive information
• Build scripts, tools, and automation to improve threat-hunting capabilities
• Work closely with Incident Response and Threat Detection teams
• Identify mitigations for vulnerabilities uncovered during hunting operations
• Support incident response activities for critical cybersecurity incidents
• Document hunt operations and build clear investigative narratives from technical data

Qualifications

• 5+ years of technical experience in Threat Intelligence, Cybersecurity Incident Response, Penetration Testing, Reverse Engineering, or Digital Forensics
• 3+ years analyzing attacker techniques across the attack lifecycle
• Knowledge of security challenges across multiple operating systems
• Ability to work with large data sets
• Experience with Splunk and scripting languages such as Python and/or PowerShell
• Ability to turn threat intelligence into actionable information
• Knowledge of the MITRE ATT&CK framework
• Ability to use technical data to document threat-hunting operations
• Current DoD Top Secret clearance
• Eligible for IT-I Critical Sensitive / Tier 5 (T5) at proposal submission

EOE Statement

We are an Equal Opportunity/Affirmative Action Employer. We consider applicants without regard to race, color, religion, age, national origin, ancestry, ethnicity, gender, gender identity, gender expression, sexual orientation, marital status, veteran status, disability, genetic information, citizenship status, or membership in any other group protected by federal, state, or local law. EOE/M/F/Vet/Disabled.

This position is currently accepting applications.

About the Organization About Markesman Group Markesman Group has gathered the nation's foremost experts in Cyber, ISR, Enterprise IT and Intelligence Analysis. We seek to lead with cutting edge technology, high quality development and best value services for both the government and commercial sectors. Our team combines passion, acumen, focus, patriotism, desire, dedication and the love for the job to create value for our customers. We pride ourselves in a rigorous selection process because not only do we want the best, we want the best to want us. Working closely together as part of a service-disabled veteran owned small business, we enjoy a family environment where teammates challenge and elevate each other every day. The Markesman family is always striving to solve tomorrow's problems, today.