Threat Hunter

NewGen Technologies; McLean (VA); On-site; USD 120,000 - 180,000; Full time

Job summary

NewGen Technologies is seeking a Cyber Threat Hunter to proactively detect, investigate, and mitigate cyber threats within a large enterprise. You will perform hypothesis-based threat hunts using the HMM-4 approach and MITRE ATT&CK, collaborating with cross-functional teams to map TTPs to observed activity.

The role requires TS/SCI FSP clearance and 3+ years in a cyber security role, with 4-6 years preferred.

Qualifications

• TS/SCI FSP clearance required.
• 3+ years in cyber security analyst or related field; 4-6 years preferred.
• Experience with hypothesis-based hunting (HMM-4) and MITRE ATT&CK.
• Hands-on with SIEM, EDR, network analytics and cloud security.

Responsibilities

• Conduct proactive threat hunting using the HMM-4 approach and MITRE ATT&CK framework.
• Develop and refine hypotheses for targeted threat hunts based on threat intelligence and data analysis.
• Collaborate with internal teams to collect and analyze security event data from logs, network traffic, and endpoint telemetry.
• Utilize cutting-edge tools to identify IOCs and anomalies indicating threats.
• Perform in-depth threat analysis, assess impact, and recommend mitigations and response strategies.
• Document objectives and progress; produce reports with root-cause analysis and remediation guidance.
• Stay up to date with latest threats and security technologies through continuous learning.

Skills

Threat hunting

MITRE ATT&CK

HMM-4

SIEM

EDR

Cloud security

Threat intel

Education

Bachelors in Cybersecurity

Certifications: GCIH/CTIA

Tools

SIEM

EDR

Network analytics

Cloud (AWS/Azure)

Threat intel tools

Job description

As a Cyber Threat Hunter, you will be responsible for proactively detecting, investigating, and mitigating cyber threats within our large enterprise environment. Your primary focus will be on hypothesis-based threat hunting utilizing the HMM-4 approach and leveraging the Mitre ATT&CK framework. You will collaborate closely with cross-functional teams, including endpoint, network, offensive, threat intelligence, cloud, and data science experts, to identify, analyze, and respond to emerging threats.

Responsibilities

• Conduct proactive threat hunting using the HMM-4 approach and Mitre ATT&CK framework
• Develop and refine hypotheses for targeted threat hunts based on threat intelligence, internal data, and analysis of attacker tactics, techniques, and procedures (TTPs)
• Collaborate with internal teams to collect and analyze security event data from various sources, such as logs, alerts, network traffic, and endpoint telemetry
• Utilize cutting-edge tools and technologies to identify indicators of compromise (IOCs) and anomalies that may indicate potential threats
• Perform in-depth analysis of identified threats, assess their impact, and recommend appropriate mitigation and response strategies
• Document investigative objectives and progress throughout threat hunt. Produce detailed reports and provide clear and concise communication on findings, to include root cause analysis and recommendations for remediation and risk mitigation. Propose enhanced detections where possible defensive gaps are identified.
• Stay up to date with the latest cyber threats, attack techniques, and security technologies through continuous learning and knowledge sharing

Requirements

• TS/SCI FSP Clearance
• Minimum of 3 years of experience as a cyber security analyst, incident responder, or other closely related cyber security discipline. 4-6 years of experience desired.
• Professional Experience: Minimum of 3 years of experience as a cyber security analyst, incident responder, or other closely related cyber security discipline. 4-6 years of experience desired.
• Methodological Expertise: Strong proficiency in hypothesis-based hunting (HMM-4), the Mitre ATT&CK matrix, and mapping adversary TTPs to observed activities
• Technical Toolset: Hands-on proficiency with SIEM platforms, EDR solutions, network traffic analysis tools, and a deep understanding of cloud environments (AWS, Azure, etc.)
• Analytical & Communication Skills: Exceptional problem-solving skills in high-pressure situations, with the ability to translate complex technical findings for both technical and non-technical audiences
• Education & Certification: Relevant industry certifications (e.g., GCIH, CTIA, or CThH) and a solid foundation in network protocols and endpoint security

About Us

For more than 20 years, NewGen Technologies has solved our clients’ toughest IT challenges with integrity, security, and outstanding service by delivering both technology and talent. We have helped secure borders, have used artificial intelligence (AI) to fight terror, aided the identification of criminals, and have helped to prevent crime through the introduction of biometrics.Our team of Highly Cleared Specialists have hard-to-find skills and expertise in a wide spectrum of technologies to provide solutions that transform business processes and solve problems of national significance. #CJ