Cybersecurity Threat Hunter (Ohio)

Markesman Group; Whitehall (OH); On-site; USD 120,000 - 180,000; Full time

Job summary

Markesman Group is seeking a Cybersecurity Incident Response & Threat Detection Analyst (Ohio) in Whitehall, OH. You will proactively hunt threats, analyze telemetry, and develop leads using threat intel to strengthen defense across enterprise networks.

The role requires hands-on experience across the attack lifecycle, proficiency with Splunk and scripting (Python/PowerShell), and the ability to translate intelligence into actionable defense. A DoD Top Secret clearance is required or eligible.

Qualifications

• 5+ years of technical experience in Threat Intelligence, Cybersecurity Incident Response, Penetration Testing, Reverse Engineering, or Digital Forensics.
• 3+ years analyzing attacker techniques across the attack lifecycle.
• Knowledge of security challenges across multiple operating systems.
• Ability to work with large data sets.
• Experience with Splunk and scripting languages such as Python and/or PowerShell.
• Ability to turn threat intelligence into actionable information.
• Knowledge of the MITRE ATT&CK framework.
• Ability to use technical data to document threat-hunting operations.
• Current DoD Top Secret clearance.
• Eligible for IT-I Critical Sensitive / Tier 5 (T5) at proposal submission.

Responsibilities

• Proactively search for sophisticated cyber threats operating undetected within enterprise networks.
• Analyze raw network, endpoint, log, and security telemetry for unusual or malicious activity.
• Develop threat-hunting leads using cyber threat intelligence and observed enterprise activity.
• Analyze adversary tactics, techniques, and procedures across the attack lifecycle.
• Use MITRE ATT&CK to investigate and characterize adversary behavior.
• Identify Advanced Persistent Threats and other sophisticated malicious activity.
• Develop and refine threat-hunting strategies and methodologies.
• Translate cyber threat intelligence into actionable defensive information.
• Build scripts, tools, and automation to improve threat-hunting capabilities.
• Work closely with Incident Response and Threat Detection teams.
• Identify mitigations for vulnerabilities uncovered during hunting operations.
• Support incident response activities for critical cybersecurity incidents.
• Document hunt operations and build clear investigative narratives from technical data.

Skills

Threat intelligence

Cybersecurity incident response

Threat hunting

Big data analysis

Documentation accuracy

Investigation reporting

MITRE ATT&CK

Threat research

Tools

Splunk

Python

PowerShell

Job description

Cybersecurity Incident Response & Threat Detection Analyst (Ohio) in Whitehall, Ohio

Responsibilities

• Proactively search for sophisticated cyber threats operating undetected within enterprise networks
• Analyze raw network, endpoint, log, and security telemetry for unusual or malicious activity
• Develop threat-hunting leads using cyber threat intelligence and observed enterprise activity
• Analyze adversary tactics, techniques, and procedures across the attack lifecycle
• Use MITRE ATT&CK to investigate and characterize adversary behavior
• Identify Advanced Persistent Threats and other sophisticated malicious activity
• Develop and refine threat-hunting strategies and methodologies
• Translate cyber threat intelligence into actionable defensive information
• Build scripts, tools, and automation to improve threat-hunting capabilities
• Work closely with Incident Response and Threat Detection teams
• Identify mitigations for vulnerabilities uncovered during hunting operations
• Support incident response activities for critical cybersecurity incidents
• Document hunt operations and build clear investigative narratives from technical data

Qualifications

• 5+ years of technical experience in Threat Intelligence, Cybersecurity Incident Response, Penetration Testing, Reverse Engineering, or Digital Forensics
• 3+ years analyzing attacker techniques across the attack lifecycle
• Knowledge of security challenges across multiple operating systems
• Ability to work with large data sets
• Experience with Splunk and scripting languages such as Python and/or PowerShell
• Ability to turn threat intelligence into actionable information
• Knowledge of the MITRE ATT&CK framework
• Ability to use technical data to document threat-hunting operations
• Current DoD Top Secret clearance
• Eligible for IT-I Critical Sensitive / Tier 5 (T5) at proposal submission

EOE Statement

We are an Equal Opportunity/Affirmative Action Employer. We consider applicants without regard to race, color, religion, age, national origin, ancestry, ethnicity, gender, gender identity, gender expression, sexual orientation, marital status, veteran status, disability, genetic information, citizenship status, or membership in any other group protected by federal, state, or local law. EOE/M/F/Vet/Disabled.

This position is currently accepting applications.

About the Organization About Markesman Group Markesman Group has gathered the nation's foremost experts in Cyber, ISR, Enterprise IT and Intelligence Analysis. We seek to lead with cutting edge technology, high quality development and best value services for both the government and commercial sectors. Our team combines passion, acumen, focus, patriotism, desire, dedication and the love for the job to create value for our customers. We pride ourselves in a rigorous selection process because not only do we want the best, we want the best to want us. Working closely together as part of a service-disabled veteran owned small business, we enjoy a family environment where teammates challenge and elevate each other every day. The Markesman family is always striving to solve tomorrow's problems, today.