Cybersecurity Threat Hunter with Security Clearance

Sarela Technology Solutions; Columbus (OH); On-site; USD 115,000 - 145,000; Full time

Benefits offered by this job

TS Clearance

Competitive salary

Job summary

SarelaTech is seeking an experienced Cybersecurity Threat Hunter to support a DoW cybersecurity mission. The role will proactively search for threats, analyze logs, and investigate unusual activity within the network, aiming to identify hidden threats and mitigate vulnerabilities.

The candidate will work with Threat Detection and Incident Response teams, translate threat intel into actionable findings, and lead analyses during APT discoveries.

Qualifications

• Five years of technical experience in Threat Intelligence, Incident Response, Penetration Testing, Reverse Engineering, or Digital Forensics.
• Three years of experience analyzing attacker techniques across all levels of attack.
• Knowledge of security challenges across multiple operating systems.
• Ability to work with large data sets.
• Experience using Splunk, Python, and PowerShell.
• Knowledge of the MITRE ATT&CK framework.
• Must possess at least one CSSP-IR certification.

Responsibilities

• Proactively search for cyber threats that may exist undetected within the network and initiate investigations to identify unusual activity.
• Analyze raw log and network data and generate threat-hunting leads with Threat Detection and Incident Response analysts.
• Cross-reference trends with current threat intelligence to identify external threat trends.
• Identify mitigations for key vulnerabilities and lead analysis when an APT or other compromise is identified.
• Develop threat-hunting strategies and build hunting tools and automation capabilities.
• Perform incident response for critical security incidents.

Skills

Threat Intelligence

Incident Response

Penetration Testing

Reverse Engineering

Digital Forensics

MITRE ATT&CK

CSSP-IR Certification

CEH

CFR

Cisco CyberOps

GCFA

GCIH

SSCP

Tools

Splunk

Python

PowerShell

Job description

SarelaTech is seeking an experienced Cybersecurity Threat Hunter to support a Department of War (DoW) cybersecurity mission. This position will proactively search for cyber threats that may exist undetected within the network and initiate investigations to identify unusual behavior indicative of malicious activity, operating under the assumption that a threat actor may already reside within the network. The Cybersecurity Threat Hunter will analyze raw log and network data and work with Threat Detection and Incident Response analysts to generate threat-hunting leads. The position will cross-reference trends and activity within the enterprise environment with current threat intelligence regarding external threat trends. The Cybersecurity Threat Hunter will identify mitigations for key vulnerabilities discovered during threat-hunting activities and take the lead on analysis when an Advanced Persistent Threat (APT) or other compromise is identified during hunting operations. The position will develop threat-hunting strategies to increase capabilities for identifying new threats and build hunting tools and automation capabilities to identify sophisticated adversaries. The Cybersecurity Threat Hunter will also perform incident response for critical security incidents.

Required Qualifications

• Five (5) years of technical experience in at least one of the following areas:
• Threat Intelligence
• Cybersecurity Incident Response
• Penetration Testing
• Reverse Engineering
• Digital Forensics
• Three (3) years of experience analyzing attacker techniques at all levels of attack.
• Knowledge of security challenges across multiple operating systems.
• Ability to work with large data sets.
• Experience using tools and scripting languages such as Splunk, Python, and PowerShell.
• Ability to turn threat intelligence into actionable information.
• Knowledge of the MITRE ATT&CK framework.
• Ability to use data to build a narrative supporting the documentation of threat-hunting operations. Certification Must possess at least one current certification meeting DoD 8570/8140 Cybersecurity Service Provider Incident Responder (CSSP-IR) requirements, including:
• Certified Ethical Hacker (CEH)
• CyberSec First Responder (CFR)
• Cisco Certified CyberOps Associate
• Computer Hacking Forensic Investigator (CHFI)
• CompTIA Cybersecurity Analyst (CySA+)
• CompTIA PenTest+
• GIAC Certified Forensic Analyst (GCFA)
• GIAC Certified Incident Handler (GCIH)
• Systems Security Certified Practitioner (SSCP) Security Clearance
• Active TS Compensation: $115,000.00 - $145,000.00 per year
• Sarela Technology Solutions, LLC is an equal opportunity employer. All aspects of employment including the decision to hire, promote, discipline, or discharge, will be based on merit, competence, performance, and business needs. We do not discriminate on any basis or status protected under federal, state, or local law