Senior Defensive Cyber Operator - Threat Hunting & IR

Bristol Bay Native Corporation; San Antonio, Northern (TX, KY); Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

Paid holidays

Medical, dental and vision insurance

401(k) with company match

Job summary

STS Systems Support, LLC (SSS) is seeking a Senior Defensive Counter Cyber (DCC) in San Antonio, TX, to support Lackland AFB. You will perform threat hunting, analyze ICs/IOCs, and develop defensive measures against APTs. Requires TS/SCI and DoD cyber credentials.

Responsibilities include incident response impact assessments, threat hunting missions, and producing security posture reports. On-site role with strong collaboration with DoD cyber teams and threat intel.

Qualifications

• DoDD8570.01‑M/8140.01 I AT Level III CND is required.
• Active TS/SCI clearance is required.
• BA/BS or MA/MS with extensive OS/Network knowledge.

Responsibilities

• Perform threat hunting for suspicious activity using indicators of compromise.
• Comply with MOUs/MOAs monitoring and reporting (CDRL A002).
• Identify intrusions and vulnerabilities; recommend mitigations.
• Develop defensive counter cyber measures against APTs.
• Conduct Defensive Counter Cyber Operations to search for APTs/IOCs.
• Provide incident response impact assessments.
• Produce network security posture assessments (CDRL A008).
• Analyze systems for DCO-related activity.
• Determine exploitation methods and attack vectors.
• Provide OJT and maintain continuity folders quarterly.
• Create metrics for reporting to improve weapon system processes (CDRL A009).
• Maintain currency on industry trends; provide operational reports.
• Use MITRE ATT&CK in duties.
• Plan threat hunt missions using threat intel.
• Execute hunt missions within cyber terrain.
• Coordinate with ESM to automate hunts and detections.
• Request TVA to validate hunt techniques.
• Identify coverage gaps in detection.
• Develop adversary schemes for hunts.
• Map MITRE ATT&CK to current coverage.
• Develop hunts for emerging threats including 0‑day concepts.
• Analyze data for trends and baseline activity.

Skills

Threat hunting

Incident response

DCO

MITRE ATT&CK

Threat intel

Education

BA/BS or MA/MS

DoDD8570.01‑M/8140.01 I AT Level III CND

Tools

WireShark

Snort

EnCase/FTK

VM environments

Job description

STS Systems Support, LLC (SSS) is seeking a Senior Defensive Counter Cyber (DCC) in San Antonio, TX, to support Lackland AFB. You will perform threat hunting, analyze ICs/IOCs, and develop defensive measures against APTs. Requires TS/SCI and DoD cyber credentials.

Responsibilities include incident response impact assessments, threat hunting missions, and producing security posture reports. On-site role with strong collaboration with DoD cyber teams and threat intel.