Cyber Threat Hunter

4 months ago

Washington, United States cFocus Software Incorporated Full time
Job DescriptionJob DescriptioncFocus Software seeks a Cyber Threat Hunter (Mid-Level) to join our program supporting United States Courts, Information Technology Security Office in Washington, DC. This position requires US Citizenship and the ability to obtain a Public Trust clearance.

Qualifications:
  • Bachelor’s Degree or equivalent experience in a computer, engineering, or science field.
  • Ability to obtain a Public Trust clearance.
  • US Citizenship
  • Hold active certifications such as GCIA or GCIH or GSEC or GMON, and Splunk Core Power User.
  • 5+ years of relevant experience.

Duties:
  • Identifies, deters, monitors, and investigates computer and network intrusions.
  • Provide computer forensic support to high technology investigations in the form of evidence seizure, computer forensic analysis, and data recovery.
  • Monitor and assess complex security devices for patterns and anomalies from raw events (DNS, DHCP, AD, SE logs), tag events for Tier 1 & 2 monitoring.
  • Conduct malware analysis in out-of-band environment (static and dynamic), including complex malware.
  • Accept and respond to government technical requests through the AOUSC ITSM ticket (e.g., HEAT or Service Now), for threat hunt support.
  • Threat hunt targets include cloud-based and non-cloud-based applications such as: Microsoft Azure, Microsoft O365, Microsoft Active Directory, and Cloud Access Security Brokers (i.e., Zscaler).
  • Review and analyze risk-based Security information and event management (SIEM) alerts when developing hunt hypotheses.
  • Review open-source intelligence about threat actors when developing hunt hypotheses.
  • Plan, conduct, and document iterative, hypothesis based, tactics, techniques, and procedures (TTP) hunts utilizing the agile scrum project management methodology.
  • At the conclusion of each hunt, propose, discuss, and document custom searches for automated detection of threat actor activity based on the hunt hypothesis.
  • Configure, deploy, and troubleshoot Endpoint Detection and Response agents (e.g., Crowdstrike and Sysmon).
  • Collect and analyze data from compromised systems using EDR agents and custom scripts provided by the AOUSC.
  • Track and document cyber defense incidents from initial detection through final resolution.
  • Interface with IT contacts at court or vendor to install or diagnose problems with EDR agents.
  • Participate in government led after action reviews of incidents.

Powered by JazzHR

7nm9APndxm

  • Security - Threat Hunter (Sr)

    2 weeks ago

    Washington, United States Quadrant Full time

    Job ID: 24-03061 Sr Threat Hunter Washington, DC MUST Experienced Sr Threat Hunter Must have one of: GCIA, GCIH, GSEC, GMON, Security+, Splunk Core Power User 8+ years of experience in a technical role in the areas of Security Operation, Incident Response, Detection Engineering, Offensive Security/Red Team, or Cyber Threat Intelligence. ...

  • Security - Threat Hunter (Sr)

    3 weeks ago

    Washington, United States Quadrant Inc Full time

    Job ID: 24-03061 Sr Threat Hunter Washington, DC MUST Experienced Sr Threat Hunter Must have one of: GCIA, GCIH, GSEC, GMON, Security+, Splunk Core Power User 8+ years of experience in a technical role in the areas of Security Operation, Incident Response, Detection...

  • Security - Threat Hunter (mid--level)

    4 weeks ago

    Washington, United States Quadrant Inc Full time

    Job ID: 24-03060 Mid-level Threat Hunter Washington, DC MUST Experienced Mid-level Threat Hunter Must have one of: GCIA, GCIH, GSEC, GMON, Security+, Splunk Core Power User 5+ years of experience in a technical role in the areas of Security Operation, Incident Response, Detection Engineering, Offensive...

  • Cyber Threat Hunter

    4 months ago

    Washington, United States cFocus Software Incorporated Full time

    Job DescriptionJob DescriptioncFocus Software seeks a Cyber Threat Hunter (Senior) to join our program supporting United States Courts, Information Technology Security Office in Washington, DC. This position requires US Citizenship and the ability to obtain a Public Trust clearance.Qualifications:Bachelor’s Degree or equivalent experience in a computer,...

  • Expert Cyber Incident Responder and Threat Hunter

    3 weeks ago

    Washington, United States ICMA-RC Full time

    Join a great place to work with MissionSquare Retirement, a FINANCIAL SERVICES LEADER in public sector employee retirement products and services. Headquartered in Washington, DC, MissionSquare Retirement was founded to provide portable retirement benefits for city and county managers, enabling accumulated retirement assets to be transferred between...

  • Cyber Threat Intelligence Analyst

    1 week ago

    Washington, United States Trustwave Full time

    About the RoleWe are seeking a highly skilled Cyber Threat Intelligence Analyst to join our team at Trustwave. As a key member of our Threat Detection and Response (TDR) team, you will play a critical role in collecting, curating, and operationalizing cyber threat intelligence to support our internal security operations services teams.Key...

  • Cyber Threat Analyst

    5 months ago

    Washington, United States Non-Departmental Agency Full time

    Summary Cyber Threat Analysts conduct analysis, digital forensics, and targeting to identify and counter foreign cyber threats against U.S. information systems, infrastructure, and cyber-related interests. ...

  • Cyber Threat Evaluation

    1 month ago

    Washington, Washington, D.C., United States Bank of America Full time

    Job Description:At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. Responsible Growth is how we run our company and how we deliver for our clients, teammates, communities and shareholders every day.One of the keys to driving Responsible Growth is being a great place to work for our...

  • Cyber Threat Analyst

    3 weeks ago

    Washington, United States Edgewater Federal Solutions Full time

    OverviewPosition Overview: Edgewater Federal Solutions is currently seeking a Mid-Level Cyber Threat Analyst to deliver threat detection expertise and bolster cyber fusion within the Client's Security Operations Center (SOC). This role is essential in safeguarding the Client's infrastructure and operations against a wide array of cyber threats. The Mid-Level...

  • Cyber Hunt and Threat Lead

    1 week ago

    Washington, United States Zen Strategics Llc Full time

    Own your opportunity to work with a client-focused agile small business. Make an impact by advancing our government organizations charged with keeping our country safe, prosperous, and secure. Zen Strategics, LLC is a cleared, minority-owned SBA 8(a) specialized consulting firm, offering innovative Cybersecurity, Cloud Migration, and Information Technology...

  • Cyber Threat Detection and Analysis Director

    1 week ago

    Washington, United States Eli Lilly Full time

    About the RoleWe are seeking a highly skilled and experienced Cyber Intelligence Lead to join our team at Eli Lilly. As a key member of our Global Cyber Defense Operations organization, you will play a critical role in safeguarding our company against cyber threats.Key ResponsibilitiesLead Cyber Threat Detection and Analysis: Develop and implement innovative...

  • Lead Cyber Threat Analyst

    3 weeks ago

    Washington, United States Palo Alto Networks Full time

    Join Our Team as a Lead Cyber Threat Analyst As a vital member of the Unit 42, National Security Team (NATSEC), you will collaborate with a globally distributed group of experts, including vulnerability researchers, reverse engineers, and threat intelligence analysts. Your role will involve: Conducting in-depth research on emerging threats and...

  • Cyber Threat Intelligence Analyst

    1 day ago

    Washington, Washington, D.C., United States Booz Allen Hamilton Full time

    About the Role:We are seeking a highly skilled Cyber Threat Intelligence Analyst to join our team at Booz Allen Hamilton. As a Cyber Threat Intelligence Analyst, you will be responsible for processing and analyzing cyber threat intelligence data related to the Defense Industrial Base (DIB). You will compile standard and ad-hoc reports as needed, leveraging...

  • Cyber Threat Hunting Specialist

    2 weeks ago

    Washington, Washington, D.C., United States Chenega MIOS SBU Full time

    Req ID: 32134Position OverviewIntermediate Threat Hunt AnalystWork Arrangement: Hybrid schedule with in-person attendance required at the Washington, DC office twice per pay period.Are you eager to develop your expertise and advance your career in a dynamic business environment? Are you seeking a role where professional growth is integral to the...

  • Cyber Threat Analyst, Security Engineering

    3 weeks ago

    Washington, United States Apple Full time

    Cyber Threat Analyst, Security EngineeringLocation: Washington DC, District of Columbia, United StatesCompany: AppleOverview:Apple's Security Engineering & Architecture (SEAR) is at the forefront of safeguarding the security foundations across all of Apple's groundbreaking products, including Mac, iPhone, iPad, Apple Watch, and Apple TV. We are seeking a...

  • Cyber Threat Hunting Specialist

    3 weeks ago

    Washington, Washington, D.C., United States Chenega MIOS SBU Full time

    Req ID: 32134Position OverviewIntermediate Threat Hunt AnalystWork Arrangement: Hybrid model requiring in-person attendance at the Washington, DC office twice per pay period.Are you prepared to elevate your expertise and advance your career in a dynamic business environment? Are you seeking a role where professional growth is integral to the organizational...

  • Cyber Threat Hunting Specialist

    3 weeks ago

    Washington, Washington, D.C., United States Chenega MIOS SBU Full time

    Req ID: 32134Position OverviewIntermediate Threat Hunt AnalystWork Arrangement: Hybrid schedule with in-person attendance required at the Washington, DC office twice per pay period.Are you prepared to elevate your expertise and advance your career in a dynamic business environment? Are you seeking a role where professional growth is integral to the company...

  • Cyber Threat Analysis Specialist

    2 weeks ago

    Washington, Washington, D.C., United States Chenega MIOS SBU Full time

    Req ID: 32134Position OverviewIntermediate Threat Hunt AnalystWork Arrangement: Hybrid schedule with in-person attendance required twice a pay period.Are you prepared to elevate your expertise and advance your career in a dynamic business environment? If you seek a role where professional growth is integral to the organizational culture, then Chenega...

  • Lead Cyber Threat Analyst

    3 weeks ago

    Washington, Washington, D.C., United States Booz Allen Hamilton Full time

    Position Overview:The Senior Cyber Intelligence Analyst will utilize advanced technical and analytical skills to assess cyber threats impacting critical infrastructure in the United States. This role involves generating comprehensive, all-source cyber intelligence evaluations by employing a variety of governmental and industry resources, along with both...

  • Cyber Threat Intelligence Lead

    1 week ago

    Washington, United States Scout Solutions Inc Defunct Full time

    Job OverviewCandidate is applying for a Senior Cyber Threat Intel (CTI) Analyst position that supports our client in Washington D.C. They will work with key vendors, open-source communities, forums, and internal functional groups/business units to:Lead the CTI functional area by working with the customer to set the strategic and programmatic direction of the...