Incident Responder​/Threat Hunter

Job Title

Tier 2 Incident Responder / Threat Hunter

Atlanta, GA (Hybrid)

12 Months Contract

Investigates escalated alerts, performs root‑cause analyses, and conducts proactive threat hunting across IT and OT environments. Drives improvements in detections, threat models, and response readiness.

• Full‑spectrum incident handling per NIST 800‑61; documentation and lessons learned
• Conduct hypothesis‑driven hunts leveraging MITRE ATT&CK, intel, and baselines; refine signatures and playbooks
• Support forensics (memory/disk/timeline) and tabletop exercises; ensure regulatory traceability
• Mentor Tier 1 analysts; contribute to knowledge base and training

• Bachelor’s in a related field
• 4+ years in SOC/IR
• Preferred certifications: GCIH, CySA+, CEH

• OT/ICS familiarity
• Splunk SPL, Crowd Strike, packet analysis
• YARA/signature development
• Familiarity with TSA SD 1582/21

• Malware behavior analysis
• C2 identification
• Endpoint isolation
• Strong written/verbal communication

On‑site at SOC; rotational on‑call; DHS Public Trust eligibility

Associate

Contract

Other

Government Administration