Cyber Threat Hunter

At Stratas Corp, our mission strives to put employees first while still being recognized as a leader in the Department of Defense Information Technology sector. We believe in a continuing pursuit of customer satisfaction and operational excellence while exceling in service innovation. We are looking for employees who value corporate culture, leadership, diversity, and commitment to quality, because we are #Team Stratas.

Location

Category

Information Technology

Job Description

The Security Operations Center (SOC) Analyst – Cyber Threat Hunter supports the monitoring, detection, analysis, and response to cybersecurity threats targeting the Military Sealift Command (MSC) network environment. This position supports Cyber Security Service Provider (CSSP) operations by conducting real-time security monitoring, analyzing network traffic, investigating alerts, and identifying potential malicious activity to maintain an active defense security posture.

The SOC Analyst will leverage intrusion detection and prevention systems, packet capture tools, Security Information and Event Management (SIEM) platforms, and other cybersecurity technologies to identify emerging threats, assess potential impacts, and support timely mitigation. The successful candidate will apply technical analysis and threat-hunting techniques to identify suspicious network activity, improve detection capabilities, and help protect critical network infrastructure.

This position requires strong analytical and troubleshooting skills, attention to detail, and the ability to operate effectively in a security-focused operational environment.

Key Responsibilities

Security Monitoring and Threat Detection

• Support day-to-day Cyber Security Service Provider (CSSP) intrusion detection and prevention operations.
• Conduct tactical, real-time monitoring and analysis of security alerts, network sessions, statistical data, and full packet captures to identify suspicious activity and potential cybersecurity threats.
• Operate and monitor intrusion-sensing, network traffic analysis, and packet capture tools to support continuous monitoring of MSC networks.
• Monitor SIEM platforms and CSSP security tools to identify anomalous behavior, indicators of compromise, and potential security incidents.
• Examine and triage security alerts to determine the nature, severity, scope, and potential impact of identified threats.
• Identify patterns of malicious activity and support proactive threat-hunting efforts to detect threats that may evade traditional security controls.

Network Traffic Analysis and Incident Investigation

• Analyze network traffic, packet captures, session data, and security logs to investigate suspicious activity and potential intrusions.
• Utilize tools such as Wireshark, Win Dump, and TCPDump to capture, inspect, and analyze network communications.
• Correlate data from multiple security monitoring sources to identify attack patterns, establish relationships between events, and support incident investigations.
• Conduct strategic analysis of Intrusion Detection System/Intrusion Prevention System (IDS/IPS) data to identify emerging threats, recurring security events, and opportunities to improve detection.
• Document investigative findings and ...
• Support the identification of threat indicators, attack techniques, and potential vulnerabilities affecting the MSC network environment.

Security Tool Configuration and Optimization

• Monitor and maintain intrusion-sensing and security monitoring technologies to support effective threat detection and prevention.
• Assist with updating and configuring CSSP security devices, including the implementation of current detection signatures and heuristic techniques.
• Evaluate security alerts and detection…