Cybersecurity Threat Hunter
Goldbelt, Inc. Columbus, Ohio, United States
Health and Human Services · 201-500 employees
Applying here? Try the free cover letter tool — paste this posting and your résumé, no account needed.
About the role
The Cybersecurity Threat Hunter proactively searches for undetected threats within the network and initiates investigations into unusual behavior. They also develop threat hunting strategies, build automation tools, and perform incident response for critical security incidents.
What they look for
Requirements
Candidates must have at least five years of technical experience in cybersecurity, threat intelligence, or related fields, along with three years of experience analyzing attacker techniques. A current DOD Top Secret clearance with eligibility for IT-I Critical Sensitive or Tier 5 access is mandatory.
Benefits
Full description
Overview
Please note that this position is contingent upon the successful award of a contract currently under bid.
Global in service but local in approach, Nisga'a Tek is committed to high-quality service to those who defend us. Nisga'a Tek ensures mission assurance and execution for customers and warfighters. Providing intelligence, IT, cyber security, training, logistics, administrative, acquisition, and background investigation services.
Summary:
The Cybersecurity Threat Hunter will proactively search for cyber threats that exist undetected within the network. Initiates investigations to identify unusual behavior indicative of malicious activity with the assumption that a threat actor already resides within the network.
Responsibilities
Essential Job Functions:
- Analyzes raw log and network data as well as working with Threat
- Detection and Incident Response analysts to generate hunting leads.
- Cross-reference trends and activity within the enterprise environment with current threat intelligence regarding external trends.
- Identifies mitigations for key vulnerabilities identified during threat as well as taking the lead on analysis if an APT or other compromise is identified while performing hunting.
- Develops threat hunting strategies to increase capabilities for finding new threats.
- Builds hunting tools and automation capabilities to identify sophisticated adversaries.
- Performs incident response for critical security incidents.
- Perform other duties as needed or required.
Qualifications
Necessary Skills and Knowledge:
- Knowledge of security challenges in multiple Operating Systems (OS)
- Ability to work with large data sets.
- Ability to turn Threat Intelligence into actionable information.
- Knowledge of MITRE ATT&CK framework
- Analytical skills to resolve issues effectively and efficiently.
- Demonstrated ability to work well with diverse teams and individuals.
Minimum Qualifications:
- Five (5) years of technical experience in one of the following areas: Threat Intelligence, Cybersecurity Incident Response, Penetration Testing, Reverse Engineering, Digital Forensics
- Three (3) years of experience analyzing attacker techniques at all levels of attack.
- Experience using tools and scripting languages such as Splunk, Python & PowerShell.
- Capable of using data to build a narrative to support documentation of hunting operations.
- Must possess a current DOD Top Secret Clearance and be eligible for an IT-I Critical Sensitive security clearance or Tier 5 (T5) at time of proposal submission.
Preferred Qualifications:
- Bachelor’s degree in a related field.
Pay and Benefits
The annual salary range for this position is $87,000 to $160,000.
At Goldbelt, we value and reward our team's dedication and hard work. We provide a competitive base salary commensurate with your qualifications and experience. As an employee, you'll enjoy a comprehensive benefits package, including medical, dental, and vision insurance, a 401(k) plan with company matching, tax-deferred savings options, supplementary benefits, paid time off, and professional development opportunities.
Similar roles
-
Chief Cyber Security Engineer
Revolutional, LLC New Carrollton, Maryland, United States · $190K–$235K/yr
-
Principal Security Engineer
Linkly Sydney, New South Wales, Australia
-
Lead Infrastructure Security Engineer
Panthalassa Portland, Oregon, United States · $180K–$250K/yr
-
Associate Director, Application Security
S&P Global Boulder, Colorado, United States · $130K–$160K/yr
-
Info Security Engineer II (Network Security)
U.S. Bank Hopkins, Minnesota, United States
-
Senior Security Engineer - xStocks
Jobgether Brazil