Cyber Threat Hunter

Job Description Job Description

Job Title:

Cyber Threat Hunter - SME

Location:

Sterling, VA and Beltsville, MD

Terms:

Full-time
Requirements:
Must be a U.S. Citizen with Active Secret Security Clearance

About us
Cyber Management is a rapidly growing Veteran Owned Small Business (VOSB). To us, Cyber is no buzzword…it is all of the technology supporting our business, government, and personal information, and we understand how vital it is to integrate security into the overall cyber management schema from design through operations. Information is one of the greatest resources of our time…keeping it flowing and keeping it safe is our mission.

Come join us as we grow!

We offer:

• Excellent compensation, benefits and financial incentive
• Opportunity to work with highly skilled and talented people
• A Company that understands and values what you do, and committed to mutual success!

About the Role
Cyber Management International Corporation is actively recruiting a highly motivated Cyber Threat Hunter looking for challenging, exciting work in support of the U.S. Department of State (DOS) Consular Affairs Enterprise Infrastructure Operations (CAEIO) Program, for the Bureau of Consular Affairs (CA). The Cyber Threat Hunter will be working closely with other CAEIO team members, application/system owners, and Government Leadership to ensure Consular Affairs mission success.

This organization provides services that analyze and produce enhanced cyber security and threat intelligence information to include threats and potential threats to the customer’s information and information systems; provides timely and relevant technical analysis to assist with mitigating cyber threats confronting the Department; supports evaluation, implementation, and operations of tools/technologies used in advanced analysis.

Functional Duties
The Cyber Threat Hunter and Researcher will support the customer’s overall cyber threat analysis efforts. Performs advanced analysis of adversary tradecraft, malicious code, and Advance Persistent Threat capabilities. Analyzes computer, communication, network security events and exploits to determine security vulnerabilities and recommend remedial actions. Conducts forensic, malicious code, and packet-level analyses to develop comprehensive technical reports stepping through complete reverse engineering of incidents.

Recommends countermeasures based on the identified techniques, tactics, procedures, and behavior patterns used by adversaries. This role is also responsible for developing alert criteria to improve incident response capabilities; as well as contributing to the development, writing, and reviewing of SOPs.

Responsibilities

• Conducts research and data correlation using a variety of enterprise data sources with specific emphasis on network operations and cyber warfare tactics, techniques, and procedures.
• Analyzes network events to determine the impact on current operations and conduct research to determine adversary capability and intent.
• Analyzes identified malicious network and system log activity to determine weaknesses exploited, exploitation methods, effects on systems and information.
• Collects and analyzes network device integrity data for signs of tampering or compromise.
• Prepares assessments and cyber threat profiles of current events based on the sophisticated collection, research, and analysis of information.
• Conducts data analysis in support of directed assessments, anomaly investigations, long term trending and system check out.
• Develops and maintains analytical procedures to meet changing requirements and customer inquiries.
• Serves as the cyber technical liaison to stakeholders, explaining investigation details.
• Tracks and documents incident response activities and provides updates to leadership through executive summaries and in-depth technical reports.
• Create, discuss and explain Cyber investigative documentation.
• Resolve highly complex malware and intrusion issues using computer host analysis, forensics, and reverse engineering.
• Characterize and analyze network traffic, identify anomalous activity / potential threats, and analyze anomalies in network traffic using metadata.

Qualifications: Basic…