Cybersecurity Threat Hunter

Goldbelt, Inc.•Columbus, OH

11h

About The Position

The Cybersecurity Threat Hunter will proactively search for cyber threats that exist undetected within the network. Initiates investigations to identify unusual behavior indicative of malicious activity with the assumption that a threat actor already resides within the network. This position is contingent upon the successful award of a contract currently under bid. Global in service but local in approach, Nisga'a Tek is committed to high-quality service to those who defend us. Nisga'a Tek ensures mission assurance and execution for customers and warfighters. Providing intelligence, IT, cyber security, training, logistics, administrative, acquisition, and background investigation services.

Requirements

Knowledge of security challenges in multiple Operating Systems (OS)
Ability to work with large data sets.
Ability to turn Threat Intelligence into actionable information.
Knowledge of MITRE ATT&CK framework
Analytical skills to resolve issues effectively and efficiently.
Demonstrated ability to work well with diverse teams and individuals.
Five (5) years of technical experience in one of the following areas: Threat Intelligence, Cybersecurity Incident Response, Penetration Testing, Reverse Engineering, Digital Forensics
Three (3) years of experience analyzing attacker techniques at all levels of attack.
Experience using tools and scripting languages such as Splunk, Python & PowerShell.
Capable of using data to build a narrative to support documentation of hunting operations.
Must possess a current DOD Top Secret Clearance and be eligible for an IT-I Critical Sensitive security clearance or Tier 5 (T5) at time of proposal submission.

Nice To Haves

Bachelor’s degree in a related field.

Responsibilities

Analyzes raw log and network data as well as working with Threat Detection and Incident Response analysts to generate hunting leads.
Cross-reference trends and activity within the enterprise environment with current threat intelligence regarding external trends.
Identifies mitigations for key vulnerabilities identified during threat as well as taking the lead on analysis if an APT or other compromise is identified while performing hunting.
Develops threat hunting strategies to increase capabilities for finding new threats.
Builds hunting tools and automation capabilities to identify sophisticated adversaries.
Performs incident response for critical security incidents.
Perform other duties as needed or required.