Job Description
Job Description
Responsibilities:
? Proactively search for sophisticated cyber threats operating undetected within enterprise networks
? Analyze raw network, endpoint, log, and security telemetry for unusual or malicious activity
? Develop threat-hunting leads using cyber threat intelligence and observed enterprise activity
? Analyze adversary tactics, techniques, and procedures across the attack lifecycle
? Use MITRE ATT&CK to investigate and characterize adversary behavior
? Identify Advanced Persistent Threats and other sophisticated malicious activity
? Develop and refine threat-hunting strategies and methodologies
? Translate cyber threat intelligence into actionable defensive information
? Build scripts, tools, and automation to improve threat-hunting capabilities
? Work closely with Incident Response and Threat Detection teams
? Identify mitigations for vulnerabilities uncovered during hunting operations
? Support incident response activities for critical cybersecurity incidents
? Document hunt operations and build clear investigative narratives from technical data
Qualifications:
? 5+ years of technical experience in Threat Intelligence, Cybersecurity Incident Response, Penetration Testing, Reverse Engineering, or Digital Forensics
? 3+ years analyzing attacker techniques across the attack lifecycle
? Knowledge of security challenges across multiple operating systems
? Ability to work with large data sets
? Experience with Splunk and scripting languages such as Python and/or PowerShell
? Ability to turn threat intelligence into actionable information
? Knowledge of the MITRE ATT&CK framework
? Ability to use technical data to document threat-hunting operations
? Current DoD Top Secret clearance
? Eligible for IT-I Critical Sensitive / Tier 5 (T5) at proposal submission
JETS CSSP LCATs