Cybersecurity Threat Hunter

Goldbelt, Inc. is hiring a Cybersecurity Threat Hunter for an onsite role in Columbus, OH. In this position, you will proactively search for cyber threats that may already be present in the network but remain undetected, then drive investigations when unusual behavior suggests malicious activity.

This role assumes a threat actor is already residing within the network, emphasizing hands-on detection work, threat-informed investigation, and continuous improvement of hunting capabilities.

What you will do

• Analyze raw log and network data and collaborate with Threat Detection and Incident Response analysts to generate hunting leads.
• Cross-reference enterprise trends and activity with current threat intelligence related to external developments.
• Identify mitigations for key vulnerabilities discovered during hunting, and lead analysis if an APT or other compromise is identified.
• Develop threat hunting strategies to expand capabilities for finding new threats.
• Build hunting tools and automation capabilities to help identify sophisticated adversaries.
• Perform incident response for critical security incidents.
• Perform other duties as needed or required.

Required qualifications

• Knowledge of security challenges across multiple Operating Systems (OS).
• Ability to work with large data sets.
• Ability to convert Threat Intelligence into actionable information.
• Knowledge of the MITRE ATT&CK framework.
• Strong analytical skills to resolve issues effectively and efficiently.
• Demonstrated ability to work well with diverse teams and individuals.
• Five (5) years of technical experience in one or more areas: Threat Intelligence, Cybersecurity Incident Response, Penetration Testing, Reverse Engineering, or Digital Forensics.
• Three (3) years of experience analyzing attacker techniques at all levels of attack.
• Experience using tools and scripting languages such as Splunk, Python, and PowerShell.
• Capable of using data to build a narrative that supports documentation of hunting operations.
• Must possess a current DOD Top Secret Clearance and be eligible for an IT-I Critical Sensitive security clearance or Tier 5 (T5) at the time of proposal submission.
• Bachelor’s degree in a related field.

Technologies

• Splunk
• Python
• PowerShell
• MITRE ATT&CK framework

Compensation and benefits

• Annual salary range: $87,000 to $160,000.
• Medical, dental, and vision insurance.
• 401(k) plan with company matching.
• Tax-deferred savings options.
• Supplementary benefits.
• Paid time off.
• Professional development opportunities.

Overview: This position is contingent upon the successful award of a contract currently under bid.

Pay and benefits note: Goldbelt, Inc. provides a competitive base salary commensurate with qualifications and experience.