Cyber Threat Hunter Senior (Washington)

Cyber Threat Hunter (Senior)

cFocus Software seeks a Cyber Threat Hunter (Senior) to join our program supporting US Courts in Washington, DC. This position has remote capabilities. This position requires an active Public Trust clearance and must meet 8570 requirements. Required qualifications include :

• 5 years of experience performing threat hunts & incident response activities for cloud-based and non-cloud-based environments, such as : Microsoft Azure, Microsoft O365, Microsoft Active Directory, and Zscaler
• 5 years of experience performing hypothesis-based threat hunt & incident response utilizing Splunk Enterprise Security
• 5 years of experience collecting and analyzing data from compromised systems using EDR agents (e.g. CrowdStrike) and custom scripts (e.g. Sysmon & Auditd)
• 5 years of experience with the following threat hunting tools : Microsoft Sentinel for threat hunting within Microsoft Azure; Tenable Nessus and SYN / ACK for vulnerability management; NetScout for analyzing network traffic flow; SPUR.us enrichment of addresses Mandiant Threat intel feeds

Must be able to work 80% (Monday thru Thursday) on-site at AOUSC office in Washington, DC. Desired qualifications include :

Duties :

Deliverables :