Talent.com
Senior Threat Hunter

Senior Threat Hunter

cFocus Software IncorporatedWashington, DC, US
job_description.job_card.30_days_ago
serp_jobs.job_preview.job_type
  • serp_jobs.job_card.full_time
  • serp_jobs.filters_job_card.quick_apply
job_description.job_card.job_description

cFocus Software seeks a Threat Hunter to support the Administrative Offices of the United States Courts (AOUSC) in Washington, DC.  This position will require 4 days a week onsite at the Thurgood Marshall Building and 1 day remote with hours of 8am- 4 :

  • 30pm.   Required Qualifications include : Ability to obtain a Public Trust 5 years of experience performing threat hunts & incident response activities for cloud-based and non-cloud-based environments, such as : Microsoft Azure, Microsoft O365, Microsoft Active Directory, and Zscaler 5 years of experience performing hypothesis-based threat hunt & incident response utilizing Splunk Enterprise Security. 5 years of experience collecting and analyzing data from compromised systems using EDR agents (e.g.
  • CrowdStrike ) and custom scripts (e.g.

Sysmon & Auditd ) 5 years of experience with the following threat hunting tools :

  • Microsoft Sentinel for threat hunting within Microsoft Azure; Tenable Nessus and SYN / ACK for vulnerability management; NetScout for analyzing network traffic flow; SPUR.us enrichment of addresses Mandiant Threat intel feeds Must be able to work 80% (Monday thru Thursday) onsite at AOUSC office in Washington, DC One of the following certifications : GIAC Certified Intrusion Analyst (GCIA) GIAC Certified Incident Handler (GCIH) GIAC Continuous Monitoring (GMON) GIAC Defending Advanced Threats (GDAT) Splunk Core Power User Duties and Responsibilities : Provide incident response services after an incident is declared and provides a service that proactively searches for security incidents that would not normally be detected through automated alerting.
  • The Threat Hunt mission is to explore datasets across the judicial fabric to identify unique anomalies that may be indicative of threat actor activity based on the assumption that the adversary is already present in the judicial fabric.
  • The extended mission is to conduct counterintelligence, build threat actor dossiers, disrupt adversary operations, identify misconfigurations / vulnerabilities, and identify visibility / detection gaps, if any.
  • Human analytical thinking is imperative to the primary and extended missions as it is up to the threat hunter to find signs of an intrusion that have bypassed the automatic detection process that may already be in place.
  • Accept and respond to government technical requests through the AOUSC ITSM ticket (e.g., HEAT or Service Now), for threat hunt support.

    • Threat hunt targets include cloud-based and non-cloud-based applications such as :

  • Microsoft Azure, Microsoft O365, Microsoft Active Directory, and Cloud Access Security Brokers (i.e., Zscaler).
  • Review and analyze risk-based Security information and event management (SIEM) alerts when developing hunt hypotheses.
  • Review open-source intelligence about threat actors when developing hunt hypotheses.
  • Plan, conduct, and document iterative, hypothesis based, tactics, techniques, and procedures (TTP) hunts utilizing the agile scrum project management methodology.
  • At the conclusion of each hunt, propose, discuss, and document custom searches for automated detection of threat actor activity based on the hunt hypothesis.
  • Configure, deploy, and troubleshoot Endpoint Detection and Response agents (e.g., CrowdStrike and Sysmon).
  • Collect and analyze data from compromised systems using EDR agents and custom scripts provided by the AOUSC.
  • Track and document cyber defense incidents from initial detection through final resolution.
  • Interface with IT contacts at court or vendor to install or diagnose problems with EDR agents.
  • Participate in government led after action reviews of incidents.
  • Triage malware events to identify the root cause of specific activity.
  • Attend daily Agile Scrum standups and report progress on assigned Jira stories.     Powered by JazzHR
    • serp_jobs.job_alerts.create_a_job

    Senior Threat Hunter • Washington, DC, US

    Job_description.internal_linking.related_jobs
    Threat Assessment Team Lead

    Threat Assessment Team Lead

    K2 Group, Inc.Arlington, VA, US
    serp_jobs.job_card.full_time
    serp_jobs.filters_job_card.quick_apply
    This is a contingent opportunity Threat Assessment Team Lead is responsible for the pre-assessment coordination requirements and providing installation support for the development and public...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_30
    • serp_jobs.job_card.promoted
    Signature Reduction Specialist, Senior

    Signature Reduction Specialist, Senior

    Clearance JobsFort George G Meade, MD, US
    serp_jobs.job_card.full_time +1
    Senior Signature Reduction Specialist.As a signature reduction specialist on our team, you will provide support for developing, coordinating, and overseeing all aspects of signature reduction activ...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_variable_days
    • serp_jobs.job_card.promoted
    Signature Reduction Specialist, Senior

    Signature Reduction Specialist, Senior

    Booz Allen HamiltonFort George G Meade, MD, US
    serp_jobs.job_card.full_time +1
    Signature Reduction Specialist, Senior.As a signature reduction specialist on our team, you will provide support for developing, coordinating, and overseeing all aspects of signature reduction acti...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_variable_days
    • serp_jobs.job_card.promoted
    Threat Assessment Team Lead

    Threat Assessment Team Lead

    Clearance JobsWashington, DC, US
    serp_jobs.job_card.full_time
    This is a contingent opportunity.The Threat Assessment Team Lead is responsible for the pre-assessment coordination requirements and providing installation support for the development and publicati...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_30
    Cyber Defense Threat Hunting Analyst

    Cyber Defense Threat Hunting Analyst

    Resource Management Concepts, Inc.Quantico, VA, US
    serp_jobs.job_card.full_time
    serp_jobs.filters_job_card.quick_apply
    Resource Management Concepts, Inc.RMC) provides high-quality, professional services to government and commercial sectors. Our mission is to deliver exceptional management and technology solutions su...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_1_day
    Subject Matter Expert (STE), Level 3 (FORECASTED)

    Subject Matter Expert (STE), Level 3 (FORECASTED)

    Independent SoftwareFort Meade, MD, US
    serp_jobs.job_card.full_time
    serp_jobs.filters_job_card.quick_apply
    At Independent Software, we understand that mission success depends on strategic cybersecurity expertise.As a Subject Matter Expert (STE) Level 3, you will serve as a trusted technical advisor deli...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_30
    • serp_jobs.job_card.promoted
    Senior Division Director - Threat Mitigation

    Senior Division Director - Threat Mitigation

    AmentumHerndon, VA, US
    serp_jobs.job_card.full_time
    Senior Division Director - Threat Mitigation.Amentum is seeking a Division Director to lead the Threat Mitigation portfolio, supporting defense and intelligence government customers in our Intellig...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_30
    • serp_jobs.job_card.promoted
    Manager, Threat Assessment and Threat Management

    Manager, Threat Assessment and Threat Management

    Clearance JobsWashington, DC, US
    serp_jobs.job_card.full_time
    Threat Assessment And Threat Management Manager.Anduril Industries is a defense technology company with a mission to transform U. By bringing the expertise, technology, and business model of the 21s...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_variable_days
    • serp_jobs.job_card.promoted
    Assets Protection Team Leader

    Assets Protection Team Leader

    TargetChantilly, VA, US
    serp_jobs.job_card.full_time
    Assets Protection (AP) teams function to keep our guests, team, and brand secure and lead through crisis events.They protect profitable sales by mitigating shortage risks, preventing theft and frau...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_variable_days
    Role Player / Surveillance Team Members

    Role Player / Surveillance Team Members

    DarkStar Intelligence LLCQuantico, VA, US
    serp_jobs.job_card.part_time
    serp_jobs.filters_job_card.quick_apply
    Role Player / Surveillance Team Members Position Summary DarkStar Intelligence is seeking Role Players and Surveillance Team Members to support training and surveillance operations across the Washing...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_30
    • serp_jobs.job_card.promoted
    Threat Intelligence Lead

    Threat Intelligence Lead

    CanonicalWashington, DC, United States
    serp_jobs.job_card.full_time
    Be among the first 25 applicants.The Threat Intelligence Lead will own Canonical's threat intelligence strategy and execution, including understanding of which cyber threat actors are targeting Can...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_30
    Threat Analyst

    Threat Analyst

    Independent SoftwareFort Meade, MD, US
    serp_jobs.job_card.full_time
    serp_jobs.filters_job_card.quick_apply
    As a Threat Analyst, you will use multiple systems and information collected from a variety of sources to assess potential mission, personnel, or facility risks. You’ll work in a fast-paced en...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_30
    • serp_jobs.job_card.promoted
    Insider Threat Program Investigative Team Analyst

    Insider Threat Program Investigative Team Analyst

    LeidosUpper Marlboro, MD, US
    serp_jobs.job_card.full_time
    The Digital Modernization Sector at Leidos currently has an opening for a UAM Investigative Team Analyst supporting the HEITS Contract as part of the Department of Homeland Security (DHS) Insider T...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_variable_days
    • serp_jobs.job_card.promoted
    Manager, Threat Assessment and Threat Management

    Manager, Threat Assessment and Threat Management

    AndurilWashington, DC, US
    serp_jobs.job_card.full_time
    Manager, Threat Assessment and Threat Management.Anduril Industries is a defense technology company with a mission to transform U. By bringing the expertise, technology, and business model of the 21...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_variable_days
    Senior Investigator, Health

    Senior Investigator, Health

    American OversightWashington, DC, US
    serp_jobs.job_card.full_time
    serp_jobs.filters_job_card.quick_apply
    This position is actively accepting applications.American Oversight is a nonpartisan, nonprofit watchdog that advances truth, accountability, and democracy by enforcing the public's right to govern...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_30
    • serp_jobs.job_card.promoted
    Cyber Security Deception / Threat Hunter

    Cyber Security Deception / Threat Hunter

    AGR, LLCArlington, VA, United States
    serp_jobs.job_card.full_time
    We are currently seeking an experienced.Senior Cyber Security Deception Engineer / Threat Hunter.Department of State (DoS) Diplomatic Security Cyber Mission (DSCM) program providing leading cyber and...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_variable_days
    • serp_jobs.job_card.promoted
    Cyber Security Deception / Threat Hunter (Arlington)

    Cyber Security Deception / Threat Hunter (Arlington)

    AGR, LLCArlington, VA, US
    serp_jobs.job_card.full_time +1
    We are currently seeking an experienced.Senior Cyber Security Deception Engineer / Threat Hunter.Department of State (DoS) Diplomatic Security Cyber Mission (DSCM) program providing leading cyber and...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_1_day
    • serp_jobs.job_card.promoted
    Asset Protection Specialist

    Asset Protection Specialist

    Home Depot (Retail)Harmans, MD, US
    serp_jobs.job_card.full_time
    The Asset Protection Specialist is primarily responsible for preventing financial loss caused by theft and fraud and supporting safety and environmental program compliance in their assigned store / m...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_30
    • serp_jobs.job_card.promoted
    Cyber Threat Analysis Division Task Lead

    Cyber Threat Analysis Division Task Lead

    Clearance JobsArlington, VA, US
    serp_jobs.job_card.full_time
    Seize your opportunity to make a personal impact as a Project / Task Manager supporting our program.GDIT is your place to make meaningful contributions to challenging projects and grow a rewarding ca...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_30
    • serp_jobs.job_card.promoted
    Global Threat Analyst

    Global Threat Analyst

    GoogleWashington, DC, US
    serp_jobs.job_card.full_time
    Security is at the core of Google's design and development process : it is built into the DNA of our products.The same is true of our offices. You're an expert who shares our seriousness about securi...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_variable_days