Cyber Hunt Analyst - 25922
hace 12 días
Columbia
Job DescriptionAt Wyetech, you’ll be at the center of an award-winning corporate culture, breaking technological barriers and solving real-world problems for our federal government customers. We are committed to hiring the best of the best, and in return, we offer a world-class, truly unique employee experience that is rare within our industry. We are looking for a Cyber Hunt Analyst with Data Science experience to apply strong cyber security, Defensive Cyber Operations (DCO), and networking domain knowledge to support cyber analytics product development, threat analysis, statistical analysis, model development, and direct customer mission support. Regular cyber hunt activities consist of hunting for threats, reporting on findings, and converting tools, techniques, and processes into automated capabilities for the current cyber platform. Regular data science activities consist of operational research, statistical analysis, hypothesis testing, model building/testing, and communicating results using visualizations. Will also be responsible for collecting customer Cyber Operations requirements, generating use cases, providing Cyber SME support, and system training to end users. #LI-DW2 #Mid-Senior Level Due to federal contract requirements, United States Citizenship and position appropriate security clearance is required. (e.g. Active TS/SCI security clearance with agency appropriate polygraph).Capabilities • Conduct threat hunt operations on assigned Big Data Platform(s) – BDP., • Present threat hunt findings through live - interactive remote conference sessions., • Perform data analytics across disparate data sets., • Assist customer(s) with their threat hunting operations., • Perform quality assurance checks on data that is resident on the BDP., • Evaluate and analyze new data feeds to determine relevance and usability of data., • Support BDP analytic requests (data search, visualizations, dashboards..etc)., • Provide real time customer support during normal working hours (BDP support chat room)., • Maintain situational awareness of emerging cyber threats for possible action and notification to an impacted customer(s)., • Support BDP demonstration requests to showcase various capabilities of the platform., • Support BDP training events either in person or virtually., • Provide advice on data enrichment and functions to enhance customer experience., • Other duties as assigned Required Qualifications, • Security Clearance - A current Secret level U.S. Government Security Clearance is required with the ability to obtain a TS/SCI level clearance; U.S. Citizenship required., • 5+ years of experience in cyber security operations related fields and a Bachelors in related field or 3 years experience with Masters; or High School Diploma and 9 years experience., • Must have Data+, Security+, CySA+, GCIH, GNFA, GCFA or other industry recognized Cybersecurity Certification., • Travel as needed to support all duties listed above., • Must be able to work on customer site on average 4 days a week in either Columbia or Ft. Meade, MD. Flexibility is essential to adapt to schedule changes as needed.Required Technical Skills, • Experience with supporting DoD customers, ideally supporting US Cyber Command, DISA, or DCDC., • Cyber Hunt methodologies and techniques., • SIEMs - (e.g., Splunk, Q-Radar, ELK)., • SOARs (e.g., Sentinel, CORTEX, X-SOAR)., • Developing and deploying threat detection signatures and detecting host and network-based intrusions., • Collecting data from a variety of cyber defense resources. (e.g., CVE, OSINT)., • Recognizing and categorizing types of vulnerabilities and associated attacks., • Reading and interpreting signatures (e.g., SNORT, SIGMA, Yara, YAML)., • Cyber defense and vulnerability assessment tools and their capabilities., • Network traffic analysis methods (e.g.,TCP-DUMP, Wireshark, Bro/Zeek)., • Familiar with cyber attack stages (e.g., reconnaissance, scanning, enumeration, gaining access, escalation of privileges, maintaining access, network exploitation, covering tracks), and incident response and handling methodologies. (e.g., MITRE ATT&CK, LM Killchain)., • Intrusion Detection System (IDS)/Intrusion Prevention System (IPS) tools and applications., • Excellent customer service, public speaking, and presentation skills., • Ability to complete technical tasks without supervision., • Ability to foster and support a collaborative working environment., • Must have Data+, Security+, CySA+, GCIH, GNFA, GCFA or other industry recognized Cybersecurity Certification., • Travel as needed to support all duties listed above., • Must be able to work on customer site on average 4 days a week in either Columbia or Ft. Meade, MD. Flexibility is essential to adapt to schedule changes as needed.Desired Technical Skills, • TS/SCI level clearance is preferred., • DoD SOC experience is a plusThe Benefits Package, • A Choice of Medical Plan Options, some with Health Savings Account (HSA), • Vision and Dental, • Life and AD&D Benefits, • Short and Long-Term Disability, • Hospital Indemnity, Accident, and Critical Illness Insurances, • Optional Identity Theft and Legal Protection ServicesCompany Environment & Perks, • Employee Referral Bonus Eligibility up to $10,000, • Mobility Among Wyetech-supported Contracts, • Various contract and work locations throughout Maryland, Virginia, Colorado, Texas, Utah, Alaska, Hawaii and OCONUS, • Various team-building events throughout the year such as: monthly lunches, summer company picnic, and an annual holiday party.