Senior Incident Responder / Threat Hunter

ShorePoint•Albuquerque, NM

9d•Onsite

About The Position

ShorePoint is a rapidly expanding, award-winning cybersecurity services firm serving high-profile, high-threat private and public-sector clients. We foster a "work hard, play hard" culture that values creativity, accountability, diversity, inclusion, and community involvement. This role offers a unique opportunity to shape the growth and development of an exciting company in the cybersecurity market, contributing to the defense of critical infrastructure while advancing your career. Employment is contingent upon contract award.

Requirements

Experience in Incident Response (IR), threat hunting, and cyber threat intelligence analysis.
Familiarity with adversary Tactics, Techniques, and Procedures (TTPs), detection engineering concepts, and forensic handling practices.
Strong analytical and investigative skills with the ability to derive actionable conclusions from telemetry and intelligence.
Experience documenting hunt results, lessons learned, and recommendations for operational improvement.
Ability to communicate technical findings to both technical and non-technical audiences.
Bachelor’s degree from an accredited university; a postgraduate degree from an accredited university may substitute for 6 years of experience.
10+ years of relevant work experience.
Proven ability to analyze complex requirements and translate them into clear, actionable tasks and processes through critical thinking.
Must currently be a U.S. citizen and eligible to obtain and maintain a security clearance, in compliance with federal contract requirements.

Nice To Haves

Active DOE Q or equivalent DoD Top Secret clearance.

Responsibilities

Lead structured monthly threat hunts, documenting hypotheses, rationale, methods, findings, the subject of the hunt, the reason for the hunt, and recommended detection improvements.
Perform proactive threat hunting across available telemetry sources to detect, identify, and neutralize malicious activity and cybersecurity threats that evade traditional perimeter controls.
Lead or support Incident Response (IR), reporting, handling, and resolution activities, conducting technical investigations and fact-finding for suspected or confirmed security incidents and concerns.
Gather cybersecurity threat intelligence from open and closed sources to integrate into hunts, detections, and operational alerting capabilities for specific systems and applications.
Perform digital forensic investigations to collect, preserve, and analyze digital evidence, supporting comprehensive IR, fact-finding, and technical coordination with IR stakeholders.
Conduct day-to-day continuous monitoring of telemetry reviews and log analysis to support ongoing threat detection, event tracking, and incident investigations.
Identify gaps in detection coverage and recommend improvements to reduce risk, enhance visibility, and track metrics related to detection queries and identified security gaps.