Threat Hunter & Incident Response Analyst - Remote

SkyePoint Decisions; Bethesda (MD); On-site; USD 95,000 - 110,000; Part time

Job summary

SkyePoint Decisions seeks a Threat Detection & Response Analyst to monitor enterprise systems, investigate security events, and respond to cybersecurity incidents across cloud, on-premises, and networks. The role emphasizes MITRE ATT&CK alignment and continuous monitoring.

This fully remote, contingent position requires a bachelor's degree and at least five years in cybersecurity, with U.S. citizenship and ability to obtain a Public Trust. Prior federal/ RMF exposure is preferred.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related field.
• Minimum 5 years of experience in cybersecurity operations, threat detection, security monitoring, incident response, or SOC environments.
• Experience applying MITRE ATT&CK techniques and adversary behaviors during investigations, threat hunting, or detection activities.
• Experience investigating cybersecurity incidents and analyzing security events.
• Familiarity with NIST RMF (SP 800-37), NIST SP 800-53 Rev. 5, FISMA, and federal cybersecurity requirements.
• Strong analytical, troubleshooting, and communication skills.
• U.S. Citizenship required.
• Ability to obtain and maintain a Public Trust.

Responsibilities

• Conduct proactive threat hunting using intelligence-driven methods.
• Analyze threat actor TTPs to identify potential compromise.
• Map observed adversary behaviors, indicators, and attack patterns to the MITRE ATT&CK framework to support detection engineering, threat hunting, and risk analysis.
• Provide threat findings, indicators, and investigations supporting RMF activities, risk assessments, POA&M development, continuous monitoring, and cybersecurity governance processes.
• Monitor security tools, dashboards, and alerts to identify potential cybersecurity threats and suspicious activity.
• Analyze events from endpoint, network, cloud, and security monitoring platforms.
• Perform triage of security alerts to determine validity, severity, and potential impact.
• Identify indicators of compromise (IOCs), attack patterns, and emerging threats.
• Escalate significant security events in accordance with established procedures.
• Investigate cybersecurity incidents, security events, and anomalous activity.
• Conduct forensic review of logs, alerts, and system data to determine root cause and scope.
• Correlate information from multiple security tools and data sources.
• Document findings, recommendations, and lessons learned from investigations.
• Support post-incident reviews and corrective action planning.
• Provide threat and incident-related information supporting risk assessments and POA&M management activities.
• Assist with audit readiness and security assessment activities when requested.

Skills

Threat detection

Incident response

Security operations

Analytical thinking

Communication

Education

Bachelor's degree in Cybersecurity or related field

Job description

SkyePoint Decisions seeks a Threat Detection & Response Analyst to monitor enterprise systems, investigate security events, and respond to cybersecurity incidents across cloud, on-premises, and networks. The role emphasizes MITRE ATT&CK alignment and continuous monitoring.

This fully remote, contingent position requires a bachelor's degree and at least five years in cybersecurity, with U.S. citizenship and ability to obtain a Public Trust. Prior federal/ RMF exposure is preferred.