Threat Hunter

NewGen Technologies • McLean, VA

1d

About The Position

As a Cyber Threat Hunter, you will be responsible for proactively detecting, investigating, and mitigating cyber threats within our large enterprise environment. Your primary focus will be on hypothesis-based threat hunting utilizing the HMM-4 approach and leveraging the Mitre ATT&CK framework. You will collaborate closely with cross-functional teams, including endpoint, network, offensive, threat intelligence, cloud, and data science experts, to identify, analyze, and respond to emerging threats.

Requirements

• TS/SCI FSP Clearance
• Minimum of 3 years of experience as a cyber security analyst, incident responder, or other closely related cyber security discipline.
• Strong proficiency in hypothesis-based hunting (HMM-4), the Mitre ATT&CK matrix, and mapping adversary TTPs to observed activities
• Hands-on proficiency with SIEM platforms, EDR solutions, network traffic analysis tools, and a deep understanding of cloud environments (AWS, Azure, etc.)
• Exceptional problem-solving skills in high-pressure situations, with the ability to translate complex technical findings for both technical and non-technical audiences
• Relevant industry certifications (e.g., GCIH, CTIA, or CThH)
• A solid foundation in network protocols and endpoint security

Nice To Haves

• 4-6 years of experience desired.

Responsibilities

• Conduct proactive threat hunting using the HMM-4 approach and Mitre ATT&CK framework
• Develop and refine hypotheses for targeted threat hunts based on threat intelligence, internal data, and analysis of attacker tactics, techniques, and procedures (TTPs)
• Collaborate with internal teams to collect and analyze security event data from various sources, such as logs, alerts, network traffic, and endpoint telemetry
• Utilize cutting-edge tools and technologies to identify indicators of compromise (IOCs) and anomalies that may indicate potential threats
• Perform in-depth analysis of identified threats, assess their impact, and recommend appropriate mitigation and response strategies
• Document investigative objectives and progress throughout threat hunt.
• Produce detailed reports and provide clear and concise communication on findings, to include root cause analysis and recommendations for remediation and risk mitigation.
• Propose enhanced detections where possible defensive gaps are identified.
• Stay up to date with the latest cyber threats, attack techniques, and security technologies through continuous learning and knowledge sharing

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed