CSSP Threat Hunting Analyst, Junior
$90,000–$140,000 year
On-siteFort Belvoir, Virginia, United States
Job Summary
Develop, test, and document proactive threat-hunting hypotheses to identify and neutralize advanced cyber threats before they cause damage. Dig through diverse telemetry datasets spanning cloud resources, identity systems, workloads, and network infrastructure to correlate events and reconstruct adversary attack campaigns. Collect and analyze network and host artifacts, including logs, system images, and packet captures. Provide expert technical support and perform real-time cyber defense incident handling tasks, including forensic collections and direct system remediation, in strict accordance with DoD Instruction 8530.01 guidelines. Create detection use cases based on current threat vectors and the MITRE ATT&CK framework, actively partnering with engineering teams to automate these use cases while keeping false-positive rates below 10%. Make technical recommendations for correlation rules, filters, and signatures, and track monthly metrics on configuration refinement requests. Schedule is Monday to Friday (0700 to 1500), with possible evening and weekend requests. Requires Top Secret clearance with SCI eligibility.
Required Qualifications
- Active Top-Secret Clearance with SCI eligibility
- DoD 8570/8140 IAT Level II
- DoD 8570/8140 CSSP Analyst
- Minimum 2 to 5 years of progressive experience in cybersecurity operations, threat hunting, or incident response
- Bachelor's degree (or 1 to 3 years with a Master's degree, or 0 to 1 years with a PhD)
- Direct CSSP or SOC Experience
- BA/BS College degree
- U.S. Citizenship
- Must be able to lift up to 10 pounds
- Must be able to lift up to 25 pounds
- Must be able to lift up to 50 pounds
- Close vision
- Distance vision
- Peripheral vision
- Depth perception
- Ability to adjust focus
- Must be available for evenings and weekends to meet program and contract needs
- Must comply with any vaccination requirements mandated by contract, applicable law or regulation
- Must agree to receive text messages regarding interview and employment status
- Must agree to TekSynap Corporation retaining and using name, e-mail, and contact information for purposes related to employment consideration
- Must be able to use hands to handle, feel, touch
- Must be able to reach with hands and arms
- Must be able to talk and hear
- Must be able to stand
- Must be able to walk
- Must be able to sit
- Must be able to climb or balance
- Must be able to stoop, kneel, crouch, or crawl
- Must be able to comply with DoD Instruction 8530.01 guidelines
- Must be able to keep false-positive rates below 10%
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.