Cyber Security Deceoption / Threat Hunter

Overview

Location : Arlington, VA; Full-time / On-site.

Senior Cyber Security Deception Engineer / Threat Hunter role within the Department of State (DoS) Diplomatic Security Cyber Mission (DSCM) program. The program provides cyber and technology security expertise to enable secure and efficient business processes across the DOS Cyber & Technology Security (CTS) Directorate. The DSCM team focuses on protecting a global cyber infrastructure and proactively identifying and responding to cyber risks and threats.

Responsibilities

• Work closely with cross-functional teams, including Security Operations, Incident Response, Threat Intelligence, and Threat Hunting to maintain a proactive and robust security posture.
• Perform advanced network threat hunting to detect malicious or suspicious activity on on-premises and cloud-based networks.
• Respond to security events from CIRT, provide comprehensive findings, and recommend remediation steps.
• Perform advanced traffic analysis (packet level) and reconstruct network traffic to identify anomalies, trends, and patterns.
• Conduct forensic analysis of suspected systems (on- and off-premise network devices, storage media) impacted by malicious activity.
• Implement and use cybersecurity frameworks (e.g., MITRE ATT&CK, Kill Chain).
• Analyze to validate established security requirements and recommend additional safeguards.
• Interface with external entities including law enforcement, intelligence, and other government organizations as needed.

Qualifications

Preferred

Seniority level

Employment type

Job function

Industries

J-18808-Ljbffr