Network Threat Hunter

Verizon•Irving, TX

7d•Hybrid

About The Position

The Network Threat Hunting role is crucial for maintaining the security of Verizon's network. Their primary objective is to proactively identify threats within Verizon's network. Professionals in this role combine their deep knowledge of security and networking with an understanding of the current threat landscape and various attack methodologies. By providing actionable intelligence to network and security teams, they aim to predict, mitigate, prevent, or respond to active and potential threats that could negatively impact Verizon's network operations. Staying up-to-date on emerging global threat activity and trends from both state and non-state actors and the threats they pose to the telecommunications infrastructure. Leading the analysis of network traffic and events, anomalous patterns with a focus on threats missed by automated security tools, or are unknown and unprecedented, and presenting actionable insights in artifacts to stakeholder organizations. Creating and evolving network threat hunting techniques through analyzing current and past incidents and breaches using internal and external data sources and intelligence. Conducting time-sensitive analysis during cyber investigations, including active network threat hunting and malware analysis. Proactively identifying potential network threat vectors and vulnerabilities through advanced threat research and analyzing log data, malicious code, packet captures, behavioral analytics and other artifacts to detect active and potential threats. Creating hypotheses and predictions of possible network threats and vulnerabilities, and working with other partner teams to validate. Cultivating and maintaining strong working relationships with Verizon's network threat intelligence partners and conveying substantive findings from threat hunting findings. Creating and maintaining documentation on threat hunting findings, processes and hand offs. Providing recommendations on tools, capabilities or datasets that may support the network threat hunting goals. Identifying gaps in network logging capabilities and developing strategies to address them. Identifying and proposing automated alerts for new and previously unknown network threats. Developing expertise on Verizon’s network threat landscape using internal data, threat trends, and operational metrics, and clearly communicating this landscape to stakeholders. Serving as an expert on network threat hunting methodology and providing peer reviews and mentoring to other team members. Ensuring the organization meets established metrics, including administrative, auditory, and KPIs.

Requirements

Strong critical thinking and analytical skills.
Comprehensive knowledge of Verizon’s network and security mechanisms.
Current understanding of the evolving threat landscape.
Ability to derive insights from extensive network data to identify threats potentially overlooked by automated systems.
Leverage historical events, logs, and data enrichment within a collaborative environment to connect disparate information.
Think creatively and generate actionable artifacts for stakeholder teams.
Commitment to continuous learning.
Bachelor's degree or four or more years of work experience.
Four or more years of relevant work experience.
Four more years of experience in designing, testing or operating networks with switching and routing experience (including OSI model, protocols, BGP data and Netflow).

Nice To Haves

Four or more years of experience in cyber related fields including but not limited to cyber security, information technology, SIEM security tools, cyber security investigations Network Security, Computer Security, Intelligence Analysis, Information Assurance, Incident Response, Intrusion Detection, Malware Analysis, Information Security Management, Penetration Testing, Vulnerability Management, Red team, Blue Team, Purple Team.
Master’s Degree or certifications in Computer Science, Telecommunications Engineering, Cyber Security, Systems Engineering or related disciplines.
A proven track record in managing complex processes, driving results, and adapting to change.
Software programming and scripting experience.
Data Science methodologies applied to network data to enable advanced threat detection.
Ability to thrive in a high-intensity, production-driven, and dynamic environment.
Experience with data analytics, AI or Machine learning methodologies.
Experience in the Diamond Model of Intrusion Analysis, Lockheed Martin Cyber Kill Chain & MITRE ATT&CK.
At least two years of experience with incident response, security operations, malware analysis, or threat hunting.
At least three years of experience with application of data science concepts and techniques to enable advanced threat detection.
Working knowledge of tools such as Splunk and Elastic Search, Grafana, Netscout.

Responsibilities

Proactively identify threats within Verizon's network.
Stay up-to-date on emerging global threat activity and trends.
Lead the analysis of network traffic and events, anomalous patterns with a focus on threats missed by automated security tools.
Create and evolve network threat hunting techniques.
Conduct time-sensitive analysis during cyber investigations.
Proactively identify potential network threat vectors and vulnerabilities.
Create hypotheses and predictions of possible network threats and vulnerabilities.
Cultivate and maintain strong working relationships with Verizon's network threat intelligence partners.
Create and maintain documentation on threat hunting findings, processes and hand offs.
Provide recommendations on tools, capabilities or datasets that may support network threat hunting goals.
Identify gaps in network logging capabilities and develop strategies to address them.
Identify and propose automated alerts for new and previously unknown network threats.
Develop expertise on Verizon’s network threat landscape.
Serve as an expert on network threat hunting methodology and provide peer reviews and mentoring.
Ensure the organization meets established metrics, including administrative, auditory, and KPIs.