Cybersecurity Threat Hunter - Top Secret Clearance Required

DirectViz Solutions, LLC•Columbus, OH

2d•$145,000 - $185,000•Onsite

About The Position

We are seeking an experienced Cybersecurity Threat Hunter to proactively identify and investigate threats within a complex enterprise environment. This role analyzes network, endpoint, and security data to detect malicious activity that may have bypassed existing security controls. The Threat Hunter will work closely with Threat Intelligence, Detection, and Incident Response teams to investigate suspicious activity, identify adversary tactics and techniques, develop hunting strategies, and respond to critical security incidents.

Requirements

5+ years of technical experience in one or more of the following: Threat Intelligence, Cybersecurity Incident Response, Penetration Testing, Reverse Engineering, Digital Forensics
3+ years of experience analyzing attacker techniques across the attack lifecycle.
Knowledge of security challenges in multiple Operating Systems (OS)
Ability to work with large data sets.
Experience with Splunk, Python, and PowerShell.
Knowledge of the MITRE ATT&CK framework.
Ability to turn Threat Intelligence into actionable information.
Capable of using data to build a narrative to support documentation of hunting operations.
Current DoD Top Secret clearance required.
Must be eligible for IT-I Critical Sensitive access.

Nice To Haves

Experience in a SOC, CSSP, CERT, or similar cyber defense environment.
Experience with APT and advanced threat hunting.
Experience with network traffic analysis, IDS/IPS, PCAP, or Wireshark.
Experience with digital forensics or malware analysis.
Relevant certifications such as GCIH, GCIA, GCFA, GNFA, GCTI, OSCP, CISSP, or CySA+.

Responsibilities

Conduct proactive threat hunting to identify malicious or suspicious activity.
Analyze network traffic, endpoint activity, logs, SIEM data, IDS/IPS alerts, and other security telemetry.
Develop threat hunts based on intelligence, vulnerabilities, and adversary TTPs.
Use MITRE ATT&CK to analyze and document attacker techniques.
Correlate internal activity with current threat intelligence.
Investigate potential APT and other advanced threat activity.
Support incident response for critical cybersecurity incidents.
Identify vulnerabilities and recommend mitigation or remediation.
Develop threat hunting queries, tools, scripts, and automation using Splunk, Python, and PowerShell.
Document hunting activities, findings, evidence, and recommendations.
Work with Threat Intelligence, Incident Response, Digital Forensics, and Detection teams to improve defensive capabilities.