Cybersecurity Threat Hunter

Accountabilities: Proactively hunt for cyber threats and malicious activity that may be operating undetected within network and enterprise environments. Investigate unusual behavior and suspicious activity using the assumption that threat actors may already have access to the environment. Analyze raw log, network, and security data to identify indicators of compromise, attacker behavior, and potential hunting leads. Collaborate with threat detection and incident response analysts to investigate findings and develop actionable intelligence. Correlate activity and behavioral trends within the enterprise environment with current threat intelligence, emerging attack techniques, and external threat developments. Identify appropriate mitigations for vulnerabilities and security weaknesses uncovered during threat-hunting activities. Lead technical analysis when an Advanced Persistent Threat (APT) or other significant compromise is identified. Develop and refine threat-hunting strategies that improve the organization's ability to detect new and evolving adversaries. Build threat-hunting tools, scripts, and automation capabilities that enhance detection of sophisticated cyber threats. Perform incident response activities for critical security incidents and support the investigation and containment of serious security events. Translate threat intelligence and technical findings into actionable information for security stakeholders. Use data to develop clear narratives and documentation supporting threat-hunting operations and investigative conclusions. Requirements: Hold a DoD Top Secret Clearance and be eligible for an IT-I Critical Sensitive security clearance or Tier 5 (T5) at the time of proposal submission. Have at least 5 years of technical experience in Threat Intelligence, Cybersecurity Incident Response, Penetration Testing, Reverse Engineering, Digital Forensics, or a closely related discipline. Have at least 3 years of experience analyzing attacker techniques across different levels of the attack lifecycle. Demonstrate knowledge of security challenges and attack behaviors across multiple operating systems. Be comfortable analyzing and interpreting large datasets to identify patterns, anomalies, and potential threats. Have hands-on experience with security and scripting tools such as Splunk, Python, and PowerShell. Demonstrate the ability to transform threat intelligence into actionable security information and investigative leads. Have knowledge of the MITRE ATT&CK framework and its application to threat analysis and hunting activities. Demonstrate strong analytical and problem-solving abilities when investigating sophisticated or ambiguous security events. Be able to communicate technical findings clearly and develop coherent narratives to document threat-hunting operations. Collaborate effectively with threat detection, incident response, and other cybersecurity professionals. Benefits: Multiple healthcare coverage options, including low-deductible and high-deductible plans. Health Savings Account (HSA)-eligible healthcare options. Dental and vision coverage. Accident and illness coverage. Short-term and long-term disability coverage. 401(k) plan with a 6% company match. Potential profit sharing based on company performance. Employee Stock Ownership Plan (ESOP), subject to eligibility and vesting requirements. Fully remote work within the United States. Negligible travel requirements. Opportunity to work on advanced threat hunting, incident response, threat intelligence, and cybersecurity initiatives. Contingent employment supporting an upcoming proposal effort, with employment dependent upon contract award.