Cyber Threat Hunter Lead in DC metro with Security Clearance

4 weeks ago

Washington DC United States Base One Technologies Full time
Required Education/Experience
The candidate must possess an active TS/SCI Clearance
In addition to clearance requirement, all DHS personnel must obtain an EOD
BS degree in Science, Technology, Engineering, Math or related field and 12+ years of prior relevant experience with a focus Primary Responsibilities
Create Threat Models to better understand the DHS IT Enterprise, identify defensive gaps, and prioritize mitigations
Author, update, and maintain SOPs, playbooks, work instructions
Utilize Threat Intelligence and Threat Models to create threat hypotheses
Plan and scope Threat Hunt Missions to verify threat hypotheses
Proactively and iteratively search through systems and networks to detect advanced threats
Analyze host, network, and application logs in addition to malware and code
Prepare and report risk analysis and threat findings to appropriate stakeholders
Create, recommend, and assist with development of new security content as the result of hunt missions to include signatures, alerts, workflows, and automation.
Coordinate with different teams to improve threat detection, response, and improve overall security posture of the Enterprise
Work with the customer to understand and obtain the scope and requirements of the requests
Provide guidance and direction to team members Required Qualifications The candidate must possess an active TS/SCI Clearance
In addition to clearance requirement, all DHS personnel must obtain an EOD.
BS degree in Science, Technology, Engineering, Math or related field and 12+ years of prior relevant experience with a focus on Cyber Security or Masters with 8 years of prior relevant experience.
Should have at least 4 years of experience serving as a SOC Analyst or Incident Responder
Ability to work independently with minimal direction; self-starter/self-motivated Must Have One of the Following J3 Certifications
SANS GCIH (GIAC Certified Incident Handler)
SANS GCFA (GIAC Certified Forensic Analyst)
SANS GCIA (GIAC Certified Intrustion Analyst)
SANS GNFA (GIAC Network Forensic Analyst)
SANS GWAPT (GIAC Web Application Pentester)
SANS GPEN (GIAC Penetration Tester)
Offensive Security Certified Professional (OSCP) Preferred Qualifications
Expertise in network and host based analysis and investigation
Demonstrated experience planning and executing threat hunt missions
Understanding of complex Enterprise networks to include routing, switching, firewalls, proxies, load balancers
Working knowledge of common (HTTP, DNS, SMB, etc) networking protocols
Familiar with operation of both Windows and Linux based systems
Proficient with scripting languages such as Python or PowerShell
Familiarity with Splunk Search Processing Language (SPL) and/or Elastic Domain Specific Language (DSL)
Demonstrated experience triaging and responding to APT activities.
Experience working with various technologies and platform such as AWS, Azure, O365, containers, etc.
Understanding of current cyber threat landscape, the different tactics commonly used by adversaries and how you would investigate, contain and recover against their attacks.

  • Cyber Security Threat EngineerContract

    6 days ago

    Washington, DC, United States Comtech Full time

    Company DescriptionComtech is a woman-owned small business founded in 1998 and headquartered in Reston, VA. We offer IT solutions across the disciplines of program/project management, applications development, infrastructure, Cyber security, and enterprise content/data management services. We have developed our methodologies and processes based on the IT...

  • Threat Hunt Analyst

    3 weeks ago

    Washington, United States CareerBuilder Full time

    Primary Responsibilities The ideal Cyber Threat Hunter is someone who is process driven, curious, and enjoys identifying patterns and anomalies in data that are not immediately obvious. The Cyber Threat Hunter will: Create Threat Models to better understand the CBP IT Enterprise, identify defensive gaps, and prioritize mitigations Author, update, and...

  • Senior Cyber Security Engineer

    2 weeks ago

    Washington, United States Iron Vine Security Full time

    Job Requirements: · Strong written and verbal communication skills. · Experience designing, implementing, and maintaining IT security systems to protect digital assets from malicious cyber-attacks. · Experience developing and implementing an annual Incident Response Training and Testing Program · Experience implementing, configuring, and...

  • Cyber Security Officer

    4 weeks ago

    Washington, Washington, D.C., United States Non-Departmental Agency Full time

    Summary Cyber Security Officers identify current threats, mitigate vulnerabilities, and anticipate future cybersecurity challenges, protecting CIA data and systems and managing IT risk. Duties As a Cyber Security Officer (CSO), you will protect Agency data and systems using sophisticated tools, instrumentation, and knowledge of CIA Information Technology...

  • Cyber Security Officer

    4 weeks ago

    Washington, United States Non-Departmental Agency Full time

    Summary Cyber Security Officers identify current threats, mitigate vulnerabilities, and anticipate future cybersecurity challenges, protecting CIA data and systems and managing IT risk. ...

  • Cyber Security SOC Lead

    2 weeks ago

    Washington, United States Gridiron IT Full time

    GridIron IT is seeking a Cyber Security SOC Lead with an Active Secret or Top Secret Clearance. Must be local to DC Metro area! The goal of the Security Operations Center (SOC) team is to proactively monitor, identify, and remediate information technology security vulnerabilities and intrusions. The team needs to ensure that all operational security controls...

  • Sr. Cyber Security Analyst

    4 weeks ago

    Washington, United States Abacus Technology Corporation Full time

    OverviewAbacus Technology is seeking a Sr. Cyber Security Analyst to plan and implement security measures for IT systems in the DoE Office of Environment, Health, Safety, and Security (EHHS). This is a full-time position.ResponsibilitiesAssist in developing the DoE EHSS security posture.Protect network and IT infrastructure and telecommunications systems and...

  • IT Supervisory Specialist

    5 days ago

    Washington D.C., United States DC HBX Full time

    DC HBX seeks IT Supervisory Specialist (Security) for Washington, DC office. Duties: Supervise team of Information Security Analysts & contractors resp to design, develop, manage, & implement IT security policies, procedures, & HBX cloud-based platform. Monitor applications, dashboards, queues, & logs; implement & revise security protocols; develop + deploy...

  • Cyber Security Watch Officer

    4 weeks ago

    Washington, United States Leidos Full time

    **Description** Leidos has a current job opportunity for a Cyber Security Watch Officer (CSWO) at the Pentagon. **This position will work Day Shift (0600-1400).** **Position Summary**: The incumbent will serve as a Cyber Security Watch Officer (CSWO) on the DISA GSM-O program supporting the Joint Service Provider (JSP) Joint Network Operation and Support...

  • Cyber Threat Analyst

    4 weeks ago

    Washington, United States Non-Departmental Agency Full time

    Summary Cyber Threat Analysts conduct analysis, digital forensics, and targeting to identify and counter foreign cyber threats against U.S. information systems, infrastructure, and cyber-related interests. ...

  • Cyber Threat Intelligence Senior Analyst

    1 week ago

    Washington, Washington, D.C., United States Bank of America Full time

    Job Description:At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. Responsible Growth is how we run our company and how we deliver for our clients, teammates, communities and shareholders every day.One of the keys to driving Responsible Growth is being a great place to work for our...

  • Cyber Threat Analyst

    4 weeks ago

    Washington, Washington, D.C., United States Non-Departmental Agency Full time

    SummaryCyber Threat Analysts conduct analysis, digital forensics, and targeting to identify and counter foreign cyber threats against U.S. information systems, infrastructure, and cyber-related interests.Duties As a Cyber Threat Analyst at CIA, you will conduct all-source analysis, digital forensics, and targeting to identify, monitor, and counter threats...

  • Cyber Integration Center Lead

    2 weeks ago

    Washington, United States S2i2 Inc Full time

    Job DescriptionJob DescriptionJob Title: Cyber Integration Center LeadLocation: Maximum telework acceptable, but candidates are required to be located within a 50-mile radius of Washington DC and Boyers, PAScope of Work:S2i2, Inc. is currently seeking a Cyber Integration Center Lead for a potential contract to assist the Office of Personnel Management (OPM),...

  • Security Officer

    4 weeks ago

    Washington, United States DC MD VA Security Service Full time

    FULL TIME AND PART TIME UNARMED SECURITY OFFICERS NEEDED - S/O Compensation: Starting at 18.00$ per hour; DOE Employment type**:CONTRACT - 1099** We are seeking reliable and experienced Unarmed Security Officers in Washington DC area for Hotel security. Selected individuals will patrol and secure assigned premises as well as identify risks to staff and...

  • Senior Cyber Security Analyst

    3 weeks ago

    Washington, United States Enlightened, Inc. Full time

    Job DescriptionJob DescriptionSenior Cyber Security AnalystAre you passionate about Cyber Security and looking to contribute to meaningful projects that impact our Nation and communities? If so, we are ready to Enlightened you! This is an excellent opportunity to use critical thinking to bring together information from multiple sources to determine if a...

  • Cyber Security Specialist

    2 days ago

    Washington, United States Jlha Full time

    If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process. Cyber Security Specialist Full Time Washington, DC, US 30+ days ago Requisition ID: 1085 At Herren Associates, we’re focused on driving innovation throughout the Federal landscape and in the business...

  • Cyber Security Analyst

    4 weeks ago

    Washington, United States Robert Half Full time

    Job Title: Contract Cyber Security AnalystLocation: Washington, DCPosition Type: ContractDuration: 6 Month Contract with possibility of extension Start Date: ASAPJob Summary:As a Contract Cyber Security Analyst, you will be responsible for strengthening our client's cybersecurity defenses and protecting their digital assets against evolving cyber threats....

  • Cyber Security Analyst

    4 weeks ago

    Washington, United States Robert Half Full time

    Job Title: Contract Cyber Security AnalystLocation: Washington, DCPosition Type: ContractDuration: 6 Month Contract with possibility of extension Start Date: ASAPJob Summary:As a Contract Cyber Security Analyst, you will be responsible for strengthening our client's cybersecurity defenses and protecting their digital assets against evolving cyber threats....

  • Cyber Security Analyst

    4 weeks ago

    Washington, United States Robert Half Full time

    Job Title: Contract Cyber Security AnalystLocation: Washington, DCPosition Type: ContractDuration: 6 Month Contract with possibility of extension Start Date: ASAPJob Summary:As a Contract Cyber Security Analyst, you will be responsible for strengthening our client's cybersecurity defenses and protecting their digital assets against evolving cyber threats....

  • Sr. Cyber Security Subject Matter Expert

    4 weeks ago

    Washington, United States Cytech Services Full time

    Job DescriptionJob DescriptionInformation System Security Analyst - Principal II - SCA06Cyber Technology Services, Inc. is supporting a U.S. Government customer on a large mission critical development and sustainment program to design, build, deliver, and operate a network operations environment including introducing new cyber capabilities to address...