Cybersecurity Threat Hunter

BMA TECHNICAL SERVICES INC • Remote, VA

7d • Remote

About The Position

BMA is seeking a Cybersecurity Threat Hunter to join our team in support of an upcoming proposal effort. This is a remote, contingent position, with employment dependent upon contract award. The role proactively searches for cyber threats that may exist undetected within the network. It initiates investigations to identify unusual behavior indicative of malicious activity, operating under the assumption that a threat actor may already reside within the network. The position analyzes raw log and network data and collaborates with Threat Detection and Incident Response analysts to generate hunting leads. It cross-references trends and activity within the enterprise environment with current threat intelligence regarding external threats and emerging trends. The role identifies mitigations for key vulnerabilities uncovered during threat-hunting activities and takes the lead on analysis if an Advanced Persistent Threat (APT) or other compromise is identified. It develops threat-hunting strategies to enhance the organization’s ability to identify new and evolving threats. The position also builds threat-hunting tools and automation capabilities to identify sophisticated adversaries and performs incident response for critical security incidents.

Requirements

• Five (5) years of technical experience in one of the following areas: Threat Intelligence, Cybersecurity Incident Response, Penetration Testing, Reverse Engineering, or Digital Forensics
• Three (3) years of experience analyzing attacker techniques at all levels of attack
• Knowledge of security challenges across multiple Operating Systems (OS)
• Ability to work with large data sets
• Experience using tools and scripting languages such as Splunk, Python, and PowerShell
• Ability to turn Threat Intelligence into actionable information
• Knowledge of the MITRE ATT&CK framework
• Capable of using data to build a narrative to support documentation of hunting operations
• DoD Top Secret Clearance requirement
• Eligible for an IT-I Critical Sensitive security clearance or Tier 5 (T5) at time of proposal submission.

Responsibilities

• Proactively searches for cyber threats that may exist undetected within the network.
• Initiates investigations to identify unusual behavior indicative of malicious activity.
• Analyzes raw log and network data.
• Collaborates with Threat Detection and Incident Response analysts to generate hunting leads.
• Cross-references trends and activity within the enterprise environment with current threat intelligence.
• Identifies mitigations for key vulnerabilities uncovered during threat-hunting activities.
• Takes the lead on analysis if an Advanced Persistent Threat (APT) or other compromise is identified.
• Develops threat-hunting strategies to enhance the organization’s ability to identify new and evolving threats.
• Builds threat-hunting tools and automation capabilities to identify sophisticated adversaries.
• Performs incident response for critical security incidents.

Benefits

• Multiple healthcare coverage options (low deductible, high deductible, HSA eligible)
• Dental insurance
• Vision insurance
• Accident & illness insurance
• Short-term disability insurance
• Long-term disability insurance
• 401(k) plan with a 6% match
• Profit sharing based on company performance
• 100% Employee Stock Ownership Plan (ESOP)

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed