Remote Cyber Threat Hunter & Threat Intelligence Pro

BMA; Virginia; Remote; USD 90,000 - 150,000; Part time

Job summary

BMA is seeking a Cybersecurity Threat Hunter to join our team for an upcoming proposal effort. This is a remote, contingent position, with employment dependent upon contract award.

The role involves proactively hunting threats, analyzing logs and network data, and leading incident response when needed. Collaboration with Threat Detection and Incident Response teams, plus developing hunting strategies and automation using Splunk, Python, and PowerShell, are key responsibilities.

Qualifications

• Five or more years in Threat Intelligence, Cybersecurity Incident Response, Penetration Testing, Reverse Engineering, or Digital Forensics.
• Three or more years analyzing attacker techniques across multiple levels.
• Knowledge of security challenges across multiple operating systems.
• Ability to work with large data sets and derive actionable insights.
• Experience using Splunk, Python, and PowerShell.
• Ability to translate Threat Intelligence into actionable information.
• Knowledge of the MITRE ATT&CK framework.
• Ability to build a narrative from data to support hunting operations.

Responsibilities

• Proactively searches for cyber threats that may exist undetected within the network.
• Initiates investigations when unusual activity is observed.
• Analyzes raw logs and network data in collaboration with Threat Detection and Incident Response analysts.
• Develops threat-hunting strategies to identify evolving threats.
• Builds hunting tools and automation capabilities; performs incident response for critical incidents.

Skills

Threat intelligence

Incident response

Penetration testing

DIGITAL FORENSICS

MITRE ATT&CK

Large data sets

Threat hunting

Splunk

Python

PowerShell

Tools

Splunk

Python

PowerShell

Job description

BMA is seeking a Cybersecurity Threat Hunter to join our team for an upcoming proposal effort. This is a remote, contingent position, with employment dependent upon contract award.

The role involves proactively hunting threats, analyzing logs and network data, and leading incident response when needed. Collaboration with Threat Detection and Incident Response teams, plus developing hunting strategies and automation using Splunk, Python, and PowerShell, are key responsibilities.