Threat Hunter with Security Clearance

VTG; Fairfax (VA); Presencial; USD 130 000 - 175 000; Tempo integral

Resumo da oferta

Byte Systems, a subsidiary of VTG, is recruiting a Threat Hunter to proactively detect, investigate, and mitigate cyber threats within a large enterprise. You'll apply hypothesis-based threat hunting using the HMM-4 approach and MITRE ATT&CK, collaborating across teams to collect data from logs, traffic, and endpoints.

The role emphasizes hands-on use of SIEM/EDR tools, cloud platform knowledge (AWS/Azure), and strong reporting with root-cause analysis.

Qualificações

• Minimum of 3 years of experience as a cyber security analyst, incident responder, or other closely related cyber security discipline. 4-6 years of experience desired.
• Strong proficiency in hypothesis-based hunting (HMM-4), the MITRE ATT&CK matrix, and mapping adversary TTPs to observed activities.
• Hands-on proficiency with SIEM platforms, EDR solutions, network traffic analysis tools, and a deep understanding of cloud environments (AWS, Azure, etc.).
• Document investigations and communicate findings with root cause analysis and remediation recommendations.
• Relevant certifications (e.g., GCIH, CTIA, or CThH) and strong network/endpoint security fundamentals.

Responsabilidades

• Conduct proactive threat hunting using the HMM-4 approach and MITRE ATT&CK framework.
• Develop and refine hypotheses for targeted threat hunts based on threat intelligence, internal data, and attacker TTPs.
• Collaborate with internal teams to collect and analyze security event data from logs, alerts, network traffic, and endpoint telemetry.
• Utilize cutting-edge tools to identify indicators of compromise (IOCs) and anomalies.
• Perform in-depth threat analysis, assess impact, and recommend mitigation and response strategies.
• Document objectives and progress; produce detailed reports with root cause analysis and remediation guidance.
• Stay up to date with the latest cyber threats and defense technologies.

Conhecimentos

HMM-4 hunting

MITRE ATT&CK

SIEM experience

EDR tools

Cloud (AWS/Azure)

Threat analysis

Descrição da oferta de emprego

Responsibilities

Overview Byte Systems, a subsidiary of VTG, is seeking a Threat Hunter. As a Cyber Threat Hunter, you will be responsible for proactively detecting, investigating, and mitigating cyber threats within our large enterprise environment. Your primary focus will be on hypothesis-based threat hunting utilizing the HMM-4 approach and leveraging the Mitre ATT\&CK framework. You will collaborate closely with cross-functional teams, including endpoint, network, offensive, threat intelligence, cloud, and data science experts, to identify, analyze, and respond to emerging threats. What will you do? Key responsibilities include:

• Conduct proactive threat hunting using the HMM-4 approach and Mitre ATT\&CK framework.


• Develop and refine hypotheses for targeted threat hunts based on threat intelligence, internal data, and analysis of attacker tactics, techniques, and procedures (TTPs).


• Collaborate with internal teams to collect and analyze security event data from various sources, such as logs, alerts, network traffic, and endpoint telemetry.


• Utilize cutting-edge tools and technologies to identify indicators of compromise (IOCs) and anomalies that may indicate potential threats.


• Perform in-depth analysis of identified threats, assess their impact, and recommend appropriate mitigation and response strategies.


• Document investigative objectives and progress throughout threat hunt. Produce detailed reports and provide clear and concise communication on findings, to include root cause analysis and recommendations for remediation and risk mitigation. Propose enhanced detections where possible defensive gaps are identified.


• Stay up to date with the latest cyber threats, attack techniques, and security technologies through continuous learning and knowledge sharing. Do you have what it takes? * Minimum of 3 years of experience as a cyber security analyst, incident responder, or other closely related cyber security discipline. 4-6 years of experience desired.


• Professional Experience: Minimum of 3 years of experience as a cyber security analyst, incident responder, or other closely related cyber security discipline. 4-6 years of experience desired


• Methodological Expertise: Strong proficiency in hypothesis-based hunting (HMM-4), the Mitre ATT\&CK matrix, and mapping adversary TTPs to observed activities.


• Technical Toolset: Hands-on proficiency with SIEM platforms, EDR solutions, network traffic analysis tools, and a deep understanding of cloud environments (AWS, Azure, etc.).


• Analytical & Communication Skills: Exceptional problem-solving skills in high-pressure situations, with the ability to translate complex technical findings for both technical and non-technical audiences.


• Education & Certification: Relevant industry certifications (e.g., GCIH, CTIA, or CThH) and a solid foundation in network protocols and endpoint security. Pay Range: VTG's estimated starting pay range is $130,000-$175,000 annually, which is a general guideline for the geographic location. When extending an offer, VTG also considers work experience, education, skill level, market considerations and may possibly include contractual requirements which may cause an offer to fall outside of this range.