Threat Hunter & Cybersecurity Incident Response Lead

ELECTROSOFT; Columbus (OH); On-site; USD 150,000 - 160,000; Full time

Job summary

Electrosoft Services, LLC is seeking a Cybersecurity Threat Hunter to proactively search for undetected threats, investigate unusual network activity, and develop hunting strategies. The role collaborates with Threat Detection and Incident Response teams to translate threat intelligence into actionable findings.

The candidate will build hunting tools and automation, analyze raw logs and data, and lead response when critical incidents occur, requiring strong experience across multiple OS

Qualifications

• Five (5) years of technical experience in Threat Intelligence, Cybersecurity Incident Response, Penetration Testing, Reverse Engineering or Digital Forensics.
• Three (3) years of experience analyzing attacker techniques at all levels of attack.
• Experience using tools and scripting languages such as Splunk, Python & PowerShell.
• Knowledge of MITRE ATT&CK framework.
• Capable of using data to build a narrative to support documentation of hunting operations.

Responsibilities

• Proactively searches for cyber threats that exist undetected within the network and initiates investigations to identify unusual behavior.
• Develops threat hunting strategies and builds automation capabilities to identify sophisticated adversaries.
• Performs incident response for critical security incidents.

Skills

Threat Intelligence

Incident Response

Penetration Testing

Reverse Engineering

Digital Forensics

Attacker techniques analysis

OS Security

Threat hunting data analysis

MITRE ATT&CK

Tools

Splunk

Python

PowerShell

Job description

Electrosoft Services, LLC is seeking a Cybersecurity Threat Hunter to proactively search for undetected threats, investigate unusual network activity, and develop hunting strategies. The role collaborates with Threat Detection and Incident Response teams to translate threat intelligence into actionable findings.

The candidate will build hunting tools and automation, analyze raw logs and data, and lead response when critical incidents occur, requiring strong experience across multiple OS