Senior Threat Hunter
cFocus Software Incorporated2 days ago
Highlight
HybridFull-timeSenior
Summary
cFocus Software Incorporated is seeking a Senior Threat Hunter to support the Administrative Offices of the United States Courts (AOUSC) in Washington, DC. The role involves performing threat hunts and incident response activities in both cloud-based and non-cloud-based environments.
About the Role
As a Senior Threat Hunter, you will provide incident response services, proactively search for security incidents, and explore datasets to identify anomalies indicative of threat actor activity. You will work closely with various tools and methodologies to conduct hypothesis-based hunts, analyze risk-based SIEM alerts, and document findings for automated detection. The position requires 80% onsite work at the AOUSC office and involves collaboration with IT contacts and participation in government-led reviews.
About You
Required:
- Ability to obtain a Public Trust
- 5 years of experience performing threat hunts & incident response activities for cloud-based and non-cloud-based environments.
- 5 years of experience performing hypothesis-based threat hunt & incident response utilizing Splunk Enterprise Security.
- 5 years of experience collecting and analyzing data from compromised systems using EDR agents and custom scripts.
- 5 years of experience with threat hunting tools such as Microsoft Sentinel, Tenable Nessus, NetScout, and Mandiant Threat intel feeds.
- One of the following certifications: GIAC Certified Intrusion Analyst (GCIA), GIAC Certified Incident Handler (GCIH), GIAC Continuous Monitoring (GMON), GIAC Defending Advanced Threats (GDAT), or Splunk Core Power User.
cFocus Software Incorporated
Established in 2006, cFocus Software automates FedRAMP compliance and develops government chatbots for the Azure Government Cloud, Office 365, and SharePoint. cFocus Software is the exclusive vendor of ATO (Authority To Operate) as a Service™, which automates FedRAMP compliance for the Azure Government Cloud and Office 365. Contact Us for a demo of ATO as a Service™ or a FREE government chatbot proof of concept project today!
Washington, DC