Elite Threat Hunter - Hypothesis-Driven Cyber Defense

NewGen Technologies; McLean (VA); On-site; USD 120,000 - 180,000; Full time

Job summary

NewGen Technologies is seeking a Cyber Threat Hunter to proactively detect, investigate, and mitigate cyber threats within a large enterprise. You will perform hypothesis-based threat hunts using the HMM-4 approach and MITRE ATT&CK, collaborating with cross-functional teams to map TTPs to observed activity.

The role requires TS/SCI FSP clearance and 3+ years in a cyber security role, with 4-6 years preferred.

Qualifications

• TS/SCI FSP clearance required.
• 3+ years in cyber security analyst or related field; 4-6 years preferred.
• Experience with hypothesis-based hunting (HMM-4) and MITRE ATT&CK.
• Hands-on with SIEM, EDR, network analytics and cloud security.

Responsibilities

• Conduct proactive threat hunting using the HMM-4 approach and MITRE ATT&CK framework.
• Develop and refine hypotheses for targeted threat hunts based on threat intelligence and data analysis.
• Collaborate with internal teams to collect and analyze security event data from logs, network traffic, and endpoint telemetry.
• Utilize cutting-edge tools to identify IOCs and anomalies indicating threats.
• Perform in-depth threat analysis, assess impact, and recommend mitigations and response strategies.
• Document objectives and progress; produce reports with root-cause analysis and remediation guidance.
• Stay up to date with latest threats and security technologies through continuous learning.

Skills

Threat hunting

MITRE ATT&CK

HMM-4

SIEM

EDR

Cloud security

Threat intel

Education

Bachelors in Cybersecurity

Certifications: GCIH/CTIA

Tools

SIEM

EDR

Network analytics

Cloud (AWS/Azure)

Threat intel tools

Job description

NewGen Technologies is seeking a Cyber Threat Hunter to proactively detect, investigate, and mitigate cyber threats within a large enterprise. You will perform hypothesis-based threat hunts using the HMM-4 approach and MITRE ATT&CK, collaborating with cross-functional teams to map TTPs to observed activity.

The role requires TS/SCI FSP clearance and 3+ years in a cyber security role, with 4-6 years preferred.