Senior Cyber Threat Hunter & Incident Response

Sarela Technology Solutions; Columbus (OH); On-site; USD 115,000 - 145,000; Full time

Benefits offered by this job

TS Clearance

Competitive salary

Job summary

SarelaTech is seeking an experienced Cybersecurity Threat Hunter to support a DoW cybersecurity mission. The role will proactively search for threats, analyze logs, and investigate unusual activity within the network, aiming to identify hidden threats and mitigate vulnerabilities.

The candidate will work with Threat Detection and Incident Response teams, translate threat intel into actionable findings, and lead analyses during APT discoveries.

Qualifications

• Five years of technical experience in Threat Intelligence, Incident Response, Penetration Testing, Reverse Engineering, or Digital Forensics.
• Three years of experience analyzing attacker techniques across all levels of attack.
• Knowledge of security challenges across multiple operating systems.
• Ability to work with large data sets.
• Experience using Splunk, Python, and PowerShell.
• Knowledge of the MITRE ATT&CK framework.
• Must possess at least one CSSP-IR certification.

Responsibilities

• Proactively search for cyber threats that may exist undetected within the network and initiate investigations to identify unusual activity.
• Analyze raw log and network data and generate threat-hunting leads with Threat Detection and Incident Response analysts.
• Cross-reference trends with current threat intelligence to identify external threat trends.
• Identify mitigations for key vulnerabilities and lead analysis when an APT or other compromise is identified.
• Develop threat-hunting strategies and build hunting tools and automation capabilities.
• Perform incident response for critical security incidents.

Skills

Threat Intelligence

Incident Response

Penetration Testing

Reverse Engineering

Digital Forensics

MITRE ATT&CK

CSSP-IR Certification

CEH

CFR

Cisco CyberOps

GCFA

GCIH

SSCP

Tools

Splunk

Python

PowerShell

Job description

SarelaTech is seeking an experienced Cybersecurity Threat Hunter to support a DoW cybersecurity mission. The role will proactively search for threats, analyze logs, and investigate unusual activity within the network, aiming to identify hidden threats and mitigate vulnerabilities.

The candidate will work with Threat Detection and Incident Response teams, translate threat intel into actionable findings, and lead analyses during APT discoveries.