Cybersecurity Threat Hunter

Titan Technologies • Columbus, OH

8d • $115,000 - $155,000

About The Position

Zen Strategics, a Titan Technologies company, is seeking a Cybersecurity Threat Hunter to support the Defense Logistics Agency (DLA). The program provides specialized cyber defense analysis, cybersecurity content development, vulnerability management, and operational technology cybersecurity support.

The Cybersecurity Threat Hunter investigates unusual activity that may indicate malicious behavior, including by operating under the assumption that a threat actor may already be present in the network. The role analyzes log and network data, collaborates with threat detection and incident response analysts, and uses internal trends and external threat intelligence to develop leads and identify adversary activity. The position also develops hunting strategies, tools, and automation; identifies mitigations for vulnerabilities; leads analysis when a compromise is identified during hunting; and performs incident response for critical security incidents.

Requirements

• Possess a current DOD Top Secret Clearance and be eligible for an IT-I Critical Sensitive security clearance or Tier 5 (T5) at time of proposal submission.
• Five years of technical experience in at least one of the following areas: Threat Intelligence, Cybersecurity Incident Response, Penetration Testing, Reverse Engineering, or Digital Forensics.
• Three years of experience analyzing attacker techniques at all levels of attack.
• Knowledge of security challenges across multiple operating systems.
• Ability to work with large data sets.
• Experience using tools and scripting languages such as Splunk, Python, and PowerShell.
• Ability to turn threat intelligence into actionable information.
• Knowledge of the MITRE ATT&CK framework.
• Ability to use data to build a narrative supporting documentation of hunting operations.
• Bachelor’s degree required.

Responsibilities

• Initiate investigations to identify unusual behavior indicative of malicious activity, assuming a threat actor may already reside within the network.
• Analyze raw log and network data and work with Threat Detection and Incident Response analysts to generate hunting leads.
• Cross-reference enterprise trends and activity with current external threat intelligence.
• Identify mitigations for key vulnerabilities found during threat hunting.
• Lead analysis when an advanced persistent threat (APT) or other compromise is identified during hunting.
• Develop threat hunting strategies to improve the ability to find new threats.
• Build hunting tools and automation to identify sophisticated adversaries.
• Perform incident response for critical security incidents.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level