Cyber Threat Hunter

CACI•Saint Louis, MO

11d

About The Position

CACI is seeking a Cyber Threat Hunter to join our team in supporting the National Geospatial-Intelligence Agency (NGA). This role will proactively search for indicators of compromise on NGA systems and networks. You will conduct host, network, and process analysis to identify potential intrusions through planned hunt missions in support of defensive cyber operations at NGA. You will create impact by providing recommendations based on findings to improve the cybersecurity posture of the organization.

Requirements

U.S. citizen
Current TS/SCI with polygraph or must obtain a polygraph within 6 months of start date
High school diploma and at least 10 years of relevant experience, bachelor’s degree with at least 5 years of relevant experience, or a master’s degree with at least 3 years of relevant experience
Possess both IAT Level III and CSSP Analyst Certification or can obtain within 90 days of start date. If you do not obtain the required certification(s) within the 90-day timeframe, you will be asked to depart the program.

Responsibilities

Proactively search for and identify indicators of compromise and anomalous behavior.
Work hunt missions independently through completion.
Assess data from multiple sources and navigate the cyber terrain to identify suspicious behavior.
Augment identification and tracking of incidents.
Create, update, and document tickets in the authorized ticketing system.
Provide input to the daily significant activity report, the daily operations update, and the weekly status report.
Work together with the cyber threat intelligence team, countermeasure development team, and other teams to improve organizational security posture.
Conduct host (Windows and Linux), network, and process analysis.
Assess and validate technical data to locate potential adversary intrusions and unauthorized activity.
Create reports detailing actions taken during hunt missions, findings, and recommendations.
Perform other duties as assigned.