Cyber Defense Threat Hunting Analyst
Resource Management Concepts, Inc.
About the Role
Resource Management Concepts, Inc. (RMC) is seeking a highly skilled Cyber Defense Threat Hunting Analyst to join its Cyber Defense Team. This role involves executing defensive cyber counter-infiltration operations to detect and mitigate Advanced Persistent Threats (APT) within the DoD customer's enterprise network. This opportunity focuses on protecting mission-critical systems while maintaining compliance with DoD cybersecurity requirements.
Key Responsibilities
- Threat Hunting and Mitigation: Conduct proactive threat hunting operations, identifying and neutralizing Advanced Persistent Threats (APTs) across enterprise systems.
- Detection and Analysis: Assess servers, hosts, and network devices to detect adversary activity, leveraging tools such as the MITRE ATT&CK® Framework, Active Directory, and PowerShell.
- Incident Response: Support Red Team exercises to demonstrate and enhance detection and mitigation capabilities.
- Research and Development: Analyze and identify new APT Tactics, Techniques, and Procedures (TTPs) to continuously improve the Hunt Team's effectiveness.
- Capability Improvement: Create new detection use cases and identify gaps in detection capability, documenting findings and submitting ITSM trouble tickets as needed.
- Training and Documentation:
- Update Cyber Hunt tactics, techniques, procedures, and training materials annually.
- Prepare and deliver at least two training sessions annually, achieving a minimum 90% satisfaction rating from attendees.
- Compliance Support: Assist in maintaining the Government's CSSP accreditation by providing technical documentation and adhering to DOD 8530.01-M standards.
Requirements & Tech Stack
- Security Clearance: Active Top Secret (TS) with SCI security clearance required; must be able to obtain and maintain access eligibility.
- Certifications:
- Required: DODD 8570 IAT Level III Certification (e.g., CISSP, CASP+, SecX).
- Required: DODD 8570 CSSP Analyst Certification (e.g., CEH, CySA+).
- Tools & Technologies: MITRE ATT&CK® Framework, Active Directory, PowerShell.
- Knowledge: Advanced Persistent Threat (APT) behaviors and TTPs.
Qualifications
- College degree in a technical related discipline.
- Alternatively, without a college degree, greater than seven years' experience in a cyber defense, cybersecurity, or information technology field.
- Demonstrated expertise in threat hunting, incident response, or related cyber defense operations.
- Strong problem-solving abilities and attention to detail.
- Excellent communication and presentation skills for training and collaboration.