Full Job Description
Position Responsibilities:
- Proactively identify, analyze, and mitigate advanced cyber threats as a Senior Threat Hunter, utilizing threat intelligence, collaborating with cyber teams, and applying cutting-edge tools and techniques to enhance the organization's security posture
- Identify contemporary and emerging security threats in the domains of cyber, policing, intelligence and terrorism, while applying critical thinking skills in conceptualizing risk and threat assessment
- Utilize Threat Intelligence feeds and solutions to identify threats, develop or recommend countermeasures, and collaborate with SOC/IR teams to perform advanced network and host analysis in the event of a compromise.
- Implement industry best practices for SOC/SIEM cyber security operations such as MITRE ATT&CK and NIST Cybersecurity Framework (CSF).
- Evaluate, report, and make recommendations on the effectiveness of the organization’s cyber security controls. Assess need for any security reconfigurations (minor or significant) within enterprise technologies such as: network(s), Active Directory, Database Platforms, general security processes, etc., and build consensus for remediation adoption and finally facilitating execution
- Develop and implement recommendations for tuning of IDS, proxy policy, in-line malware tools based on threat feeds, trust and reputation data, events, or vulnerabilities and exploits of downstream systems
- Travel occasionally based on issues, system requirements, training, etc.
- Other duties as assigned
Required Education and Experience:
- Bachelor's Degree in Engineering, Computer Science, or other IT related field and 4 plus years of experience working in a proactive hunting and analysis role or High School Diploma/General Education Diploma and 7 plus years of experience working in a proactive hunting and analysis role
- Expertise doing security event monitoring, analysis and triage
- Strong understanding of security principles such as attack frameworks, threat landscapes, attacker TTPs, etc.
Preferred Education and Experience:
- Master’s Degree
- Advanced forensics, incident response, or threat hunting experience
- Working knowledge of scripting languages (Python, PowerShell, etc.)
- Hands on experience with EDR/XDR and SOAR solutions, log analysis, SIEM, and TIP (MISP/OpenCTI/Anomali), detection engineering, and malware analysis
- Relevant industry certifications such as GCFA, GCIA, GCIH, GREM, CySa+, CCSP, or ECIH
- Strong knowledge of network communications, routing protocols, regulatory standards and compliance requirements and common internet applications/standards
Job Information
Job Category:
Information Technology
Spotlight
Employer
Related jobs
Production Coordinator, Flooring
ALLY BUILDING SOLUTIONS
Ally Building Solutions provides flooring, cabinetry, countertop, appliances, window treatment, wire shelving, glass enclosure products, millwork and expert installation services, as well as design st...
Nov 28, 2024
Orlando, FL
Traveling Assistant Project Manager
T.W. Frierson Contractor
Date Posted: 11/26/2024Location: Nashville, TNSalary Interval: SalaryPay Range: N/A Application InstructionsPlease complete the general application questions and attach your resume. We will conta...
Nov 28, 2024
Nashville, TN
Emergency Psychiatric Technician
Rutland Regional Medical Center
As part of an interdisciplinary team, under the direction and supervision of professional clinical staff, the Emergency Psychiatric Technician is responsible for basic and supportive care to psychiatr...
Nov 28, 2024
Rutland, VT