Cyber Threat Hunter

2 months ago

Remote, Oregon, United States MindPoint Group Full time

Text code MCTH to to apply

Since 2009, MindPoint Group has been the cybersecurity firm of choice for the most security-conscious US federal agencies and commercial enterprises.

We're proud to be one of Inc. 5000's fastest-growing companies in the country. With several 'Best Places to Work' awards under our belts, we have a diverse employee-focused culture, accessibility, and communication between all levels and departments, and over 4 stars in reviews on Glassdoor.

Come be a part of what we're building. We use our award-winning recruitment process to seek the most skilled, experienced, and driven information security consulting experts in the industry, while simultaneously empowering applicants to determine if MindPoint Group is the right fit for them. We are profoundly invested in selecting the right people to join our team and are equally driven to expand and develop careers long-term.

With positions throughout the US, a role at MindPoint Group promises you:

  • An opportunity to work within one of the most diverse DC-based organizations
  • Generous tuition and professional development reimbursements
  • Mentorship opportunities with leaders focused on your growth
  • Competitive benefits like 401k matching, 11 federal holidays, etc.
  • And more

Job Description

Mindpoint Group, LLC has an exciting opportunity to join the Cyber Threat Hunt team for MPGSOC, our Security Operations Center service offering. This position is critical to the continued maturation of our customers' operational capabilities. You will join an established and experienced SOC that is motivated to provide excellent services in defending federal and commercial organizations. You will work closely with SOC analysts and engineers, and we will rely on you to hunt down the most advanced global threats. We need you to see the security stack and all of its capabilities, identify what might have gotten through and how, and aggressively pursue the threat.

What you get to do every day:

  • Actively hunt for Indicators of Compromise (IOC) and APT Tactics, Techniques, and Procedures (TTP) in customer environments
  • Search network flow, PCAP, logs, and sensors for evidence of cyber-attack patterns, and hunt for Advanced Persistent Threats (APT)
  • Create detailed Investigation and Incident Reports and contribute to lessons learned in collaboration with the appropriate team
  • Collaborate with the SOC to contain and investigate major incidents
  • Provide simple and reusable hunt tactics and techniques to a team of security engineers, SIEM specialists, and SOC analysts
  • Work with leadership and the engineering team to improve and expand available toolsets
  • Analyze network perimeter data, flow, packet filtering, proxy firewalls, and IPS/IDS to create and implement a concrete plan of action to harden the defensive posture
  • Monitor open source and commercial threat intelligence for IOCs, new vulnerabilities, software weaknesses, and other attacker TTPs
  • Collaborate with and mentor Detection Team analysts, to develop hunt skills
  • Develop and refine hunt tactics, and team documentation
  • Collaborate with incident response analysts, to ensure effectiveness and support response efforts

Qualifications

*Ability to obtain Public Trust level clearance required*

What skills do you need?

  • 10 years of general experience and 8 years of relevant Cybersecurity experience
  • Experience with securing and hardening IT infrastructure
  • Demonstrated or advanced experience with computer networking and operating systems
  • Experience with operational security, including security operations center (SOC), EDR/XDR, incident response, malware analysis, or IDS and IPS analyses
  • Demonstrated proficiency with regular expression and scripting languages, including Python or PowerShell
  • Demonstrated proficiency with data hunting, including ELK, Splunk, Apache Spark, or AWS Stack
  • Familiarity with: Netflow data, DNS logs, Proxy Logs
  • Experience with network hunting, including Zeek Logs, Netflow, PCAP, firewalls, and proxies
  • Knowledge of Windows and Linux OS' and command line
  • Ability to analyze malware, extract indicators, and create signatures in Yara, Snort, and IOCs
  • Strong analytical skills and the ability to effectively research, write, communicate and brief varying levels of audiences to include at the executive level
  • Knowledge related to the current state of cyber adversary tactics and trends
  • Knowledge of the CrowdStrike, Sumo Logic, Splunk and/or other search languages, search techniques, alerts, dashboards, and report building
  • Knowledge of the TCP/IP networking stack and network IDS technologies

What is ideal?

  • Bachelor's Degree in CS-related field preferred
  • Certifications Desired: CISSP, SANS GCTI, CCSP, GCFA, GCFE, GREM, GNFA, or OSCP Certification

Location:

  • This is a fully remote role.

Additional Information

  • All your information will be kept confidential according to EEO guidelines.
  • Compensation is unique to each candidate and relative to the skills and experience they bring to the position. The salary range for this position is typically $140-160k. This does not guarantee a specific salary as compensation is based upon multiple factors such as education, experience, certifications, and other requirements, and may fall outside of the above-stated range.
  • Highlights of our benefits include Health/Dental/Vision, 401(k) match, Flexible Time Off, STD/LTD/Life Insurance, Referral Bonuses, professional development reimbursement, maternity/paternity leave, mobile phone stipend, pre-tax commuter benefits, the opportunity to participate in our mentorship program, and more
  • MindPoint is committed to maintaining a diverse environment. All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law.

Job applicants that are interested in one of our openings and may require a reasonable accommodation to participate in the job application or interview process, should contact us to request an accommodation.

Are you interested in a posted job opportunity but may not check all of the "boxes" for desired qualifications? If so, we encourage you to apply Our commitment to sustain and champion an inclusive and dynamic community of employees is a high priority

Text code MCTH to to apply

  • Sr. Threat Hunting Researcher

    3 weeks ago

    Remote, Oregon, United States Palo Alto Networks Full time

    Our MissionAt Palo Alto Networks everything starts and ends with our mission:Being the cybersecurity partner of choice, protecting our digital way of life.Our vision is a world where each day is safer and more secure than the one before. We are a company built on the foundation of challenging and disrupting the way things are done, and we're looking for...

  • Threat Intelligence Analyst

    2 months ago

    Remote, Oregon, United States Sophos Full time

    Role Summary As a Threat Intelligence Analyst supporting our Managed Detection & Response (MDR) Team, you will leverage your experience, skills, and cybersecurity knowledge of the threat actor landscape to convert threat data into actionable intelligence information to ultimately better protect our customers from evolving threats. A primary focus of this...

  • Threat Intelligence Analyst

    4 weeks ago

    Remote, Oregon, United States Sophos Full time

    About UsSophos is a global leader and innovator of advanced security solutions that defeat cyberattacks, including Managed Detection and Response (MDR) and incident response services and a broad portfolio of endpoint, network, email, and cloud security technologies. As one of the largest pure-play cybersecurity providers, Sophos defends more than 600,000...

  • Penetration Tester

    2 months ago

    Remote, Oregon, United States UltraViolet Cyber Full time

    Make a difference here.UltraViolet Cyber is a leading platform-enabled unified security operations company providing a comprehensive suite of security operations solutions. Founded and operated by security practitioners with decades of experience, the UltraViolet Cyber security-as-code platform combines technology innovation and human expertise to make...

  • SecOps Engineer- Chronicle

    1 month ago

    Remote, Oregon, United States UltraViolet Cyber Full time

    UltraViolet Cyber is seeking a highly skilled SecOps Engineer with expertise in Chronicle SIEM and SOAR to join our dynamic team. If you are passionate about cybersecurity and thrive in a fast-paced environment, we want to hear from you. The SecOps Engineer will be responsible for deploying, configuring, and managing our security information and event...

  • Proposal Manager

    2 months ago

    Remote, Oregon, United States UltraViolet Cyber Full time

    Make a difference here.UltraViolet Cyber is a leading platform-enabled unified security operations company providing a comprehensive suite of security operations solutions. Founded and operated by security practitioners with decades of experience, the UltraViolet Cyber security-as-code platform combines technology innovation and human expertise to make...

  • Cyber Security Specialist II

    1 week ago

    Remote, Oregon, United States Codeworks L.L.C Full time

    Job OverviewCodeworks L.L.C is a prominent IT Services organization based in Southeastern Wisconsin, recognized for our unwavering dedication to excellence and our direct engagement with clients.Who We Are Seeking:Our client is in search of a seasoned Cyber Security Specialist II to become a vital member of their Information and Data Security Team. The ideal...

  • Associate Cyber Security Specialist

    5 days ago

    Remote, Oregon, United States WorkWave Full time

    Job SummaryWe are seeking a highly skilled and experienced Cyber Security Engineer to join our dynamic team at WorkWave. As a key member of our security team, you will be responsible for implementing and maintaining compliance with industry standards, conducting regular audits and assessments, and developing and updating policies and procedures to support...

  • Cyber Security Professional

    6 days ago

    Remote, Oregon, United States WorkWave Full time

    Job SummaryWe are seeking a highly skilled and experienced Cyber Security Engineer to join our dynamic team at WorkWave. The ideal candidate will possess a strong understanding of both compliance and security principles, including expertise in industry standards and regulatory requirements.Key ResponsibilitiesCompliance and Security: Implement and maintain...

  • Technical Account Manager II

    2 months ago

    Remote, Oregon, United States Huntress Full time

    Reports to: Manager, Technical Account ManagementLocation: Remote United StatesCompensation range: $120,000 to $130,000 base with on target earnings of $150,000 to $165,000, plus equityWhat We Do:Founded in 2015 as a fully remote company by former NSA cyber operators, Huntress was built on a simple premise: to force hackers to earn every inch of their...

  • Product Support Specialist

    1 month ago

    Remote, Oregon, United States Huntress Full time

    Reports to: Product Support ManagerLocation: Remote US, Eastern Time ZoneCompensation Range: $50,000 to $65,000 base, plus bonus and equityWhat We Do:Founded in 2015 as a fully remote company by former NSA cyber operators, Huntress was built on a simple premise: to force hackers to earn every inch of their access. Today's cyber-attacks aren't limited to...

  • Competitive Intelligence Strategist

    4 weeks ago

    Remote, Oregon, United States Huntress Full time

    Reports to: Principal Competitive Intelligence ManagerLocation: Remote USCompensation Range: $100,000 to $110,000 base plus bonus and equity What We Do:Founded in 2015 as a fully remote company by former NSA cyber operators, Huntress was built on a simple premise: to force hackers to earn every inch of their access. Today's cyber-attacks aren't limited to...

  • Video Animator and Editor

    1 month ago

    Remote, Oregon, United States Huntress Full time

    Reports to: Creative DirectorLocation: Remote, USCompensation Range: $90,000 to $105,000 base, plus bonus and equity What We Do:Founded in 2015 as a fully remote company by former NSA cyber operators, Huntress was built on a simple premise: to force hackers to earn every inch of their access. Today's cyber-attacks aren't limited to large organizations with...

  • Cyber Security Compliance Engineer

    1 week ago

    Remote, Oregon, United States WorkWave Full time

    POSITION SUMMARY:We are looking for a talented and knowledgeable Cyber Security Compliance Engineer to enhance our innovative team. The successful candidate will have a solid grasp of compliance and security frameworks, with a focus on standards such as PCI DSS, SOC, ISO, and PrivacyShield. This position requires collaboration with multiple departments to...

  • Cyber Security Compliance Specialist

    1 week ago

    Remote, Oregon, United States WorkWave Full time

    POSITION SUMMARY:We are looking for a proficient and knowledgeable Cyber Security Compliance Specialist to enhance our innovative team. The successful candidate will have a solid grasp of compliance and security standards, with a focus on PCI DSS, SOC, ISO frameworks, and PrivacyShield. This position entails collaborating with multiple departments to ensure...

  • Cyber Security Compliance Engineer

    1 week ago

    Remote, Oregon, United States WorkWave Full time

    POSITION SUMMARY:We are looking for a knowledgeable and dedicated Cyber Security Compliance Engineer to enhance our proactive security measures. The successful candidate will have a comprehensive grasp of compliance and security frameworks, particularly in PCI DSS, SOC, ISO standards, and PrivacyShield. This position requires collaboration across various...

  • Technical Account Manager III

    2 months ago

    Remote, Oregon, United States Huntress Full time

    Reports to: Manager, Technical Account ManagementLocation: Remote USCompensation range: $140,000 to $150,000 base with on target earnings of $175,000 to $190,000, plus equity What We Do:Founded in 2015 as a fully remote company by former NSA cyber operators, Huntress was built on a simple premise: to force hackers to earn every inch of their access.Today's...

  • Director, Cybersecurity

    2 months ago

    Remote, Oregon, United States Blockchains Full time

    Blockchains will only consider candidates who reside in the U.S. and do not require any VISA support.In the transformative world of Web3, it is an individual's fundamental right to own and control their digital identity. To ensure that the individual is paramount in Web3, we are developing tools that enable everyone to engage and transact online in a safe...

  • Customer Success Manager

    1 month ago

    Remote, Oregon, United States Cyware Full time

    About CywareCyware delivers an innovative approach to cybersecurity that unifies threat intelligence, automation, threat response, and vulnerability management with data insights gleaned from assets, users, malware, attackers, and vulnerabilities. Cyware's Cyber Fusion platform integrates SOAR and TIP technology, enabling collaboration across siloed security...

  • Sales Account Executive

    1 month ago

    Remote, Oregon, United States PartnerOne Full time

    DescriptionFidelis, A PartnerOne company, is a leading global provider of advanced threat detection and response solutions. We empower organizations to combat cyber threats with confidence through our innovative technologies and comprehensive cybersecurity expertise. Our solutions enable enterprises to proactively identify, hunt down, and neutralize...