CSSP Threat Hunting Analyst, Junior

Develop proactive threat-hunting hypotheses and execute hunts using threat intelligence, behavioral anomalies, and attack path analysis to identify and neutralize advanced threats evading signature-based detection. Dig through diverse telemetry datasets spanning cloud resources, identity systems, workloads, and network infrastructure to correlate events and reconstruct adversary campaigns. Collect and analyze network and host artifacts, including logs, system images, and packet captures, while providing real-time cyber defense incident handling and forensic collections in strict accordance with DoD Instruction 8530.01 guidelines. Create detection use cases based on current threat vectors and the MITRE ATT&CK framework, partnering with engineering teams to automate these use cases and maintain false-positive rates below 10%. Make technical recommendations for correlation rules, filters, and signatures, leveraging the CSSP Data Element Dictionary to ensure hunting operations rely exclusively on high-fidelity telemetry.