Cyber Defense Threat Hunting Analyst

Resource Management Concepts, Inc.•Quantico, VA

8d•$125,000 - $145,000•Onsite

About The Position

Resource Management Concepts, Inc. (RMC) is seeking a highly skilled Cyber Defense Threat Hunting Analyst to join their Cyber Defense Team. This role involves executing defensive cyber counter-infiltration operations to detect and mitigate Advanced Persistent Threats (APT) within the DoD customer’s enterprise network. The position utilizes cutting-edge tools and methodologies to protect mission-critical systems while maintaining compliance with DoD cybersecurity requirements. This is an opportunity to work on advanced defensive cyber operations, contributing to national security by protecting enterprise networks from sophisticated threats, as part of an elite team leveraging state-of-the-art tools and methodologies.

Requirements

DODD 8570 IAT Level III Certification (e.g., CISSP, CASP+, SecX)
DODD 8570 CSSP Analyst Certification (e.g., CEH, CySA+)
College degree in a technical related discipline.
Without college degree, greater than seven years’ experience in a cyber defense, cybersecurity, or information technology field.
Demonstrated expertise in threat hunting, incident response, or related cyber defense operations.
Familiarity with tools like MITRE ATT&CK® Framework, Active Directory and PowerShell.
Knowledge of Advanced Persistent Threat (APT) behaviors and TTPs.
Strong problem-solving abilities and attention to detail.
Excellent communication and presentation skills for training and collaboration.

Responsibilities

Conduct proactive threat hunting operations, identifying and neutralizing Advanced Persistent Threats (APTs) across enterprise systems.
Assess servers, hosts, and network devices to detect adversary activity, leveraging tools such as the MITRE ATT&CK® Framework, Active Directory, and PowerShell.
Support Red Team (penetration testing) exercises to demonstrate and enhance detection and mitigation capabilities.
Analyze and identify new APT Tactics, Techniques, and Procedures (TTPs) to continuously improve the Hunt Team’s effectiveness.
Create new detection use cases and identify gaps in detection capability, documenting findings and submitting ITSM trouble tickets as needed.
Update Cyber Hunt tactics, techniques, procedures, and training materials annually.
Prepare and deliver at least two training sessions annually, achieving a minimum 90% satisfaction rating from attendees.
Assist in maintaining the Government’s CSSP accreditation by providing technical documentation and adhering to DOD 8570.01-M standards.