Threat Hunt Analyst - Washington, United States - Gray Tier Technologies LLC

Gray Tier Technologies LLC Washington, United States

2 weeks ago

Description

Primary Responsibilities

The ideal Cyber Threat Hunter is someone who is process driven, curious, and enjoys identifying patterns and anomalies in data that are not immediately obvious.

The Cyber Threat Hunter will:
Create Threat Models to better understand the CBP IT Enterprise, identify defensive gaps, and prioritize mitigations
Author, update, and maintain SOPs, playbooks, work instructions
Utilize Threat Intelligence and Threat Models to create threat hypotheses
Plan and scope Threat Hunt Missions to verify threat hypotheses
Proactively and iteratively search through systems and networks to detect advanced threats
Analyze host, network, and application logs in addition to malware and code
Prepare and report risk analysis and threat findings to appropriate stakeholders
Create, recommend, and assist with development of new security content as the result of hunt missions to include signatures, alerts, workflows, and automation
Coordinate with different teams to improve threat detection, response, and improve overall security posture of the Enterprise

Basic Qualifications:
The ideal candidate will have the following qualifications:

Expertise in network and host based analysis and investigation
Demonstrated experience planning and executing threat hunt missions
Understanding of complex Enterprise networks to include routing, switching, firewalls, proxies, load balancers
Working knowledge of common (HTTP, DNS, SMB, etc) networking protocols
Familiar with operation of both Windows and Linux based systems
Proficient with scripting languages such as Python or PowerShell
Familiarity with Splunk Search Processing Language (SPL) and/or Elastic Domain Specific Language (DSL)
The candidate must currently possess a Top Secret Clearance.

In addition to clearance requirement, all CBP personnel must have a current or be able to favorably pass a 5 year background investigation (BI).

Should have 4 years of experience serving as a SOC Analyst or Incident Responder
Ability to work independently with minimal direction; self-starter/self-motivated

#J-18808-Ljbffr

Threat Hunt Analyst

2 weeks ago

OneZero Solutions Washington, United States

We are an employee-centric company that truly appreciates our team members and their value to our customers and the missions they support. We pride ourselves on being forward-leaning thinkers and fostering teams that are and continue to be technically proficient and technically c ...
Intermediate Threat Hunt Analyst

1 week ago

Chenega MIOS SBU Washington, United States

Req ID:31179 · Summary · Intermediate Threat Hunt Analyst · Hybrid Schedule: In person, in the Washington, DC office twice a pay period. · Are you ready to enhance your skills and build your career in a rapidly evolving business climate? Are you looking for a career where profe ...
Intermediate Threat Hunt Analyst

3 days ago

Chenega MIOS SBU Washington, United States

Req ID: 31179 · Summary · Intermediate Threat Hunt Analyst · Hybrid Schedule: In person, in the Washington, DC office twice a pay period. · Are you ready to enhance your skills and build your career in a rapidly evolving business climate? Are you looking for a career where pr ...
Senior Threat Hunt Analyst

1 week ago

Chenega Corporation Washington, United States

**Req ID:** 31191 · **Summary** · **Senior Threat Hunt Analyst** · **Hybrid Schedule: In person, in the Washington, DC office twice a pay period.** · Are you ready to enhance your skills and build your career in a rapidly evolving business climate? Are you looking for a caree ...
Intermediate Threat Hunt Analyst

1 week ago

Chenega Corporation Washington, United States

**Req ID:** 31179 · **Summary** · **Intermediate Threat Hunt Analyst** · **Hybrid Schedule: In person, in the Washington, DC office twice a pay period.** · Are you ready to enhance your skills and build your career in a rapidly evolving business climate? Are you looking for a ...
Intermediate Threat Hunt Analyst

5 days ago

Chenega Corporation Washington, United States

Summary · Intermediate Threat Hunt Analyst · Hybrid Schedule: In person, in the Washington, DC office twice a pay period. · Are you ready to enhance your skills and build your career in a rapidly evolving business climate? Are you looking for a career where professional developm ...
Cyber Threat Hunter Lead in DC metro with Security Clearance

1 week ago

Base One Technologies Washington, United States

Required Education/Experience · The candidate must possess an active TS/SCI Clearance. In addition to clearance requirement, all DHS personnel must obtain an EOD. BS degree in Science, Technology, Engineering, Math or related field and 12+ years of prior relevant experience with ...
Incident Response Expert

4 weeks ago

Fusion Technology Washington, United States

Job Description · Job Description · Employee dedication contributes to our success, customer satisfaction, and our nation's most outstanding achievements. At Fusion Technology, we recognize that our employees are our greatest attribute. That is why our top priority is to attrac ...
Security Operations Center

1 week ago

4 Staffing Corp Washington, United States

About the job Security Operations Center (SOC) Analyst · Job Description: We are seeking a skilled and detail-oriented Security Operations Center (SOC) Analyst to join our team. As a SOC Analyst, you will be responsible for monitoring, analyzing, and responding to security incid ...
Cybersecurity Threat Intelligence Analyst

1 week ago

RedTrace Technologies Inc Washington, United States

Job Description · Job Description · Company Overview: · As a Cybersecurity, Information Technology, and Management Consulting firm focused on assisting our commercial and U.S. Intelligence Community clients proactively mitigate threats, RedTrace Technologies is seeking talente ...
SOC Sr Analyst

2 weeks ago

ASM Research, An Accenture Federal Services Company Washington, United States

Evaluates application security in all phases of the software development life cycle. Works closely with team members to define application security best practices, performs software architecture and design reviews, and supports the identification, interpretation, and remediation ...
SOC Analyst Lead

3 weeks ago

XOR Security Washington, United States

Job Title: SOC Analyst Lead · Location: st St NW Washington, District of Columbia Onsite twice a week · Clearance Level: Public Trust · Required Certification(s): An industry technical certification such as GCIH, MS-SC200 or other MS cloud certifications · SUMMARYXOR Securit ...
Cybersecurity Threat Intelligence Analyst

5 days ago

RedTrace Technologies Inc Washington, United States

Company Overview: As a Cybersecurity, Information Technology, and Management Consulting firm focused on assisting our commercial and U.S. Intelligence Community clients proactively mitigate threats, RedTrace Technologies is seeking talented and innovative team members to join us ...
Senior Insider Threat Analyst

5 days ago

XOR Security Washington, United States

Job Title: · Senior Insider Threat Analyst · Location: · 1 Massachusetts Ave NW Washington, District of Columbia 20001 · Clearance Level: · U.S. Citizen · Required Certification(s): · One of the following: GCIA, GCED, GCFA, GCFE, GCTI, GNFA, GCIH, ECSA, CHFI, CISSP, Securit ...
Tier 1 Onsite Security Operations Center

2 weeks ago

Arcetyp LLC Washington, United States

Arcetyp LLC is a growing small business that provides a broad range of consulting services to US Federal Government, US Military, and Commercial clients. Services include Management & IT Consulting, Program & Project Management, and Professional & Admin Services. We are recruitin ...
Security Operations Center Lead

2 weeks ago

Phoenix Cyber Washington, United States

Job DescriptionJob DescriptionPhoenix Cyberis looking for a Security Operations Center Lead to join our client delivery team. This position is onsite at the client location in the Washington, DC area with the possibility of remote work. This position is normal business hours betw ...
Cyber Threat Hunter, Senior Analyst

1 week ago

Tik Tok Washington, United States

Responsibilities · About TikTok U.S. Data SecurityTikTok is the leading destination for short-form mobile video. Our mission is to inspire creativity and bring joy. U.S. Data Security ("USDS") is a subsidiary of TikTok in the U.S. This new, security-first division was created to ...
Senior Cybersecurity Analyst

6 days ago

Adlumin Washington, United States

Job Description · Job Description · Location: · Remote · Schedule: · Full-Time · Travel: · None · About Adlumin: · Adlumin, Inc. provides the enterprise-grade security operations platform and managed detection and response (MDR) services that keep mid-market organizations se ...
SOC Sr Analyst

1 week ago

ASM Research, An Accenture Federal Services Company Washington, United States

Evaluates application security in all phases of the software development life cycle. Works closely with team members to define application security best practices, performs software architecture and design reviews, and supports the identification, interpretation, and remediation ...
Cyber Threat Hunter, Senior Analyst

21 hours ago

Tik Tok Washington, United States

Responsibilities · About TikTok U.S. Data Security · TikTok is the leading destination for short-form mobile video. Our mission is to inspire creativity and bring joy. U.S. Data Security ("USDS") is a subsidiary of TikTok in the U.S. This new, security-first division was create ...