Cybersecurity Threat Hunter

Apply Description OCH Technologies is actively looking for a Cybersecurity Threat Hunter supporting a Defense Logistics Agency program. This position supports a proposal effort and is contingent upon award, customer approval, and successful onboarding requirements. Location Remote Core Responsibilities & Duties Proactively searches for cyber threats that exist undetected within the network. Initiates investigations to identify unusual behavior indicative of malicious activity with the assumption that a threat actor already resides within the network. Analyzes raw log and network data as well as working with Threat Detection and Incident Response analysts to generate hunting leads. Cross-reference trends and activity within the enterprise environment with current threat intelligence regarding external trends. Identifies mitigations for key vulnerabilities identified during threat as well as taking the lead on analysis if an APT or other compromise is identified while performing hunting. Develops threat hunting strategies to increase capabilities for finding new threats. Builds hunting tools and automation capabilities to identify sophisticated adversaries. Performs incident response for critical security incidents. Responsibilities may evolve over time to support team and organizational goals, but will remain consistent with the overall scope of the role. Requirements Minimum Qualifications Education Bachelor’s degree (BS or BA) in a technical discipline from an accredited university Experience At least five (5) years of technical experience in one or more of the following areas: Threat Intelligence, Cybersecurity Incident Response, Penetration Testing, Reverse Engineering, or Digital Forensics. Three (3) years of experience analyzing adversary tactics, techniques, and procedures (TTPs) across all levels of the attack lifecycle. Experience identifying and addressing security challenges across multiple operating systems and environments. Experience working with and analyzing large datasets to identify trends, anomalies, and potential security threats. Experience using cybersecurity tools and scripting languages, including Splunk, Python, and PowerShell. Demonstrated ability to translate threat intelligence into actionable insights and recommendations. Working knowledge of the MITRE ATT&CK framework and its application to threat detection, analysis, and hunting. Ability to analyze and interpret data to develop clear, evidence-based narratives supporting the documentation and communication of threat hunting operations. Security Clearance Requirement Candidate must possess a current DOD Top Secret Clearance and be eligible for an IT-I Critical Sensitive security clearance or Tier 5 (T5) at time of proposal submission. About Us : At OCH, we are more than just a government contracting firm; we are innovators and leaders in providing cutting-edge IT services and cybersecurity solutions.…