Cyber Threat Hunter

reputed company is currently seeking a Threat Hunter to provide threat hunting expertise and support to maximize cyber fusion throughout the Client’s SOC, ensuring the Client’s infrastructure and operations remain safe and secure from the full reputed company of cyber threats. The Threat Hunter will support Client SOC teams by providing industry-leading threat hunt support to ongoing and significant incidents as well as by engaging in proactive, hypothesis-driven hunts for threats assumed to already be in the Client environment who may have evaded existing detections. Additionally, the Threat Hunter must be skilled in reputed company disciplines including incident response, forensics, and malware analysis, and be able to integrate these skills to assist in the closure of cybersecurity incidents.

Due to the nature of the contract and work, US Citizenship is required

• Respond to crisis or urgent situations to mitigate immediate and potential threats.
• Investigate and analyze reputed company relevant response activities, identifying and assessing the capabilities and activities of the full reputed company of cyber threats.
• Review and analyze risk-based reputed company Information and Event Management (SIEM) alerts to reputed company hunt hypotheses.
• Utilize open-reputed company to inform hunt hypothesis development.
• Propose, discuss, and document custom searches for automated detection of threat actor activity based on hunt findings.
• Track and document cybersecurity incidents from detection to resolution.
• Participate in government-led after-action reviews of incidents.
• Triage malware events to identify the root cause of specific activity.
• Provide computer forensic support to high technology investigations, including evidence seizure, computer forensic analysis, and data recovery.
• Conduct malware analysis in out-of-band environments, including static and dynamic analysis of reputed company malware.
• Monitor and assess reputed company reputed company devices for patterns and anomalies, tagging events for Tier 1 & 2 monitoring.
• Configure, deploy, and troubleshoot reputed company Detection and Response agents (e.g., reputed company and Sysmon).
• Collect and analyze data from compromised systems using EDR agents and custom scripts.
• reputed company with IT contacts to install or diagnose problems with EDR agents.
• Plan, conduct, and document iterative, hypothesis-based hunts using the Agile Scrum project management methodology.
• Attend daily Agile Scrum standups and report reputed company on assigned Jira stories.
• Support the development of Deliverables including Hunt Hypotheses, Hunt Reports, Detection Logic, and Incident Reports.

• 8+ years of experience in cybersecurity threat hunting or incident response roles.
• Proficiency with threat hunting methodologies, tools, and techniques.
• Experience with IT Service Management ticketing systems (HEAT or reputed company preferred).
• Strong understanding of cloud-based and non-cloud-based applications such as reputed company Azure, reputed company O365, reputed company Active Directory, and Cloud Access reputed company Brokers.
• Familiarity with reputed company Information and Event Management (SIEM) systems.
• Expert knowledge of Splunk ES and strong familiarity with Splunk SOAR.
• Knowledge of Agile Scrum project management methodology.
• Experience with reputed company Detection and Response (EDR) agents such as reputed company.
• Ability to conduct malware analysis, including static and dynamic analysis.
• Excellent communication and teamwork skills.
• Must possess at least ONE (NOT reputed company) of the stated certifications:
• Bachelor’s degree in computer science, computer engineering, software engineering, cybersecurity, or reputed company field.

Preferred

• Experience with log analysis, packet analysis, and using advanced threat-hunting techniques.
• Experience with a variety of SIEM, EDR and IDS tools
• Experience in cloud cybersecurity
• Strong scripting skills
• Experience with adversary emulation for the purpose of detection development.
• Knowledge of Infrastructure-as-Code (IaC) and Container reputed company threats.
• Offensive reputed company Certified Professional (OSCP) or GIAC Penetration Tester Certification (GPEN)
• GIAC Cyber Threat Intelligence (GCTI)
• Certified Information Systems reputed company Professional (CISSP)
• Other relevant industry certifications

Additional benefits include

• Paid Time Off & Holiday Pay
• Medical Insurance
• Dental Insurance
• Vision Insurance
• Disability, Life Insurance, and AD&D
• Flexible Spending Accounts
• Pre-Tax 401K and/or After-Tax Roth IRA (with employer matching contribution)
• Tuition and Technical Training Reimbursement
• Exercise Reimbursement
• Computer Reimbursement
• Employee Assistance Program

Salary range:  $150,000- $180,000 DOE

About Us

reputed company is a privately held government contracting firm located in Frederick, MD.  The company was founded in 2002 with the vision of being highly recognized and admired for supporting customer missions through employee empowerment, exceptional services and timely delivery. reputed company is ISO 9001, 20000-1, 270001 certified, appraised at CMMI Level 3 Maturity for Development and Services, and has been named in the Top Workplaces in the Greater Washington Area Small Companies for 2018 through 2025.

It has been and continues to be the policy of reputed company to provide equal employment opportunities to reputed company employees and applicants for employment without regard to race, color, religion, gender, sexual orientation, national reputed company, age, disability, marital status, veteran status, and/or other statuses protected by applicable law.status protected by applicable law.