Senior Cyber Security Analysts - Cyber Threat Hunting (CTH)

FIS Management Services; United States; Sur place; USD 120 000 - 160 000; Plein temps

Avantages offerts par ce poste

Telecommuting permissible (policy)

Résumé du poste

FIS Management Services, LLC seeks Senior Cyber Security Analysts - Cyber Threat Hunting (CTH) in Jacksonville, FL to drive proactive, hypothesis-based threat hunts across endpoint, network, identity, and cloud telemetry to uncover stealthy adversary activity, directly contributing to reductions in attack dwell time within the FIS environment.

Implement independent investigations using EDR and SIEM, correlate evidence, and support containment and remediation.

Qualifications

• Bachelor's degree in Computer Engineering, Computer Science, Cybersecurity, or related field.
• Minimum of five years of experience in information security roles including threat hunting, cyber threat intel, and incident response.
• Experience investigating endpoint threats with EDR platforms (CrowdStrike Falcon) using behavioral analysis and persistence detection.
• Experience building and tuning detections in SIEM platforms (Splunk, Azure Sentinel, QRadar).
• Experience analyzing malicious infrastructure, domains, credential harvesting, and adversary infrastructure using intel platforms (Anomali).
• Hands-on scripting in Python, PowerShell, or Bash for automation and data enrichment.
• Ability to map activity to MITRE ATT&CK and translate intel into detections and playbooks.

Responsabilités

• Lead proactive threat hunts across endpoints, network, identity, and cloud telemetry.
• Investigate complex incidents with EDR/SIEM data and multi-source correlation.
• Develop, tune, and investigate detections using Splunk, Azure Sentinel, and QRadar.
• Analyze adversary TTPs and map to MITRE ATT&CK for durable detections.
• Automate hunting workflows using Python, PowerShell, and Bash.
• Collaborate with SOC, pentest, and detection engineering teams to operationalize hunts into detections and playbooks.

Connaissances

Threat hunting

EDR

SIEM

Python

PowerShell

Bash

Automation

MITRE ATT&CK mapping

Threat intelligence

Incident response

Formation

Bachelor's degree

Outils

Splunk

Azure Sentinel

QRadar

CrowdStrike Falcon

Anomali

Description du poste

FIS Management Services, LLC seeks Senior Cyber Security Analysts - Cyber Threat Hunting (CTH) in Jacksonville, FL to drive proactive, hypothesis-based threat hunts across endpoint, network, identity, and cloud telemetry to uncover stealthy adversary activity, directly contributing to reductions in attack dwell time within the FIS environment . Implement independent execution of complex investigations using enterprise-level EDR and SIEM platforms, correlation of multi-source evidence, and rapid scoping, containment, and remediation support for incidents including malware, credential compromise, and unauthorized access. Responsible for clearly documenting hunt outcomes and investigative conclusions, translating threat intelligence and adversary TTPs into high-fidelity behavioral analytics mapped to frameworks such as MITRE ATT&CK. Partner with Security Operations Center, Penetration Testing Teams, and Detection Engineering stakeholders to operationalize successful hunts into durable detections and improved response playbooks. Automate and scale hunting and investigative workflows through scripting languages (PowerShell/BASH/Python), enrichment, and data analysis to improve speed, consistency, and signal quality. Lead threat hunting efforts in newly acquired or integrating M&A environments, requiring rapid assessment of unfamiliar architectures, establishment of baselines, identification of inherited risk and latent compromise, and hunting for pre- and post-acquisition adversary activity while informing integration and risk-reduction strategies. Provide technical direction, standards, and mentorship through threat hunting expertise, supporting FIS's internal Cyber Security function.

REQUIREMENTS

• Bachelor's degree or foreign equivalent in Computer Engineering, Computer Science, Cybersecurity, or a related field, and five (5) years of experience in an information security or related role, including: performing threat hunting, cyber threat intelligence, and incident response activities within enterprise environments, including investigation of malware, credential compromise, and unauthorized access;
• investigating endpoint based security threats using enterprise endpoint detection and response (EDR) platforms, including CrowdStrike Falcon, involving behavioral analysis, process activity, command line execution, and persistence mechanisms;
• developing, tuning, and investigating security detections using security information and event management (SIEM) platforms including Splunk, Azure Sentinel, and QRadar, for analysis of authentication logs, endpoint telemetry, network events, and cloud audit logs;
• investigating malicious infrastructure threats, including analysis of malicious domains, credential harvesting activity, and adversary controlled infrastructure using enterprise security and threat intelligence platforms, including Anomali;
• supporting cybersecurity incident response activities, including incident triage, scoping, containment, and remediation;
• utilizing scripting and automation to support security operations, including use of Python, PowerShell, and Bash for data analysis, alert enrichment, workflow automation, and investigative support;
• consuming and applying threat intelligence, including indicators of compromise (IOCs), adversary tactics, techniques, procedures (TTPs), open source intelligence (OSINT), and mapping activity to MITRE ATT&CK industry recognized frameworks.

Telecommuting and/or working from home may be permissible pursuant to company policies.

Privacy Statement

FIS is committed to protecting the privacy and security of all personal information that we process in order to provide services to our clients. For specific information on how FIS protects personal information online, please see the Online Privacy Notice .

EEOC Statement

FIS is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, marital status, genetic information, national origin, disability, veteran status, and other protected characteristics. The EEO is the Law poster is available here supplement document available here

For positions located in the US, the following conditions apply. If you are made a conditional offer of employment, you will be required to undergo a drug test. ADA Disclaimer: In developing this job description care was taken to include all competencies needed to successfully perform in this position. However, for Americans with Disabilities Act (ADA) purposes, the essential functions of the job may or may not have been described for purposes of ADA reasonable accommodation. All reasonable accommodation requests will be reviewed and evaluated on a case-by-case basis.