Cyber Hunt Analyst (Hybrid) - 27591

About the role

Enlighten is a leader in big data solution development and deployment, specializing in cloud-based services, software and systems engineering, cyber capabilities, and data science. We provide continuous innovation and proactive solutions to meet our customers' challenges.

Responsibilities

• Conduct threat hunt operations on assigned JCRS-D (Big Data Platforms).
• Present threat hunt findings through live - interactive remote conference sessions.
• Perform data analytics across disparate data sets.
• Afford customer(s) with their threat hunting operations on location as required.
• Evaluate and analyze new data feeds to determine relevance and usability of data.
• Support JCRS-D analytic requests (data search, visualizations, dashboards).
• Maintain situational awareness of emerging cyber threats for possible action and notification to an impacted customer(s).
• Support JCRS-D demonstration requests to showcase various capabilities of the platform.
• Provide advice on data enrichment and functions to enhance customer experience.
• Provide real time customer support during normal working hours (JCRS-D support chat room).
• Support JCRS-D training events either in person or virtually.
• Perform quality assurance checks on data that is resident on JCRS-D.
• Collaborate in-person and remotely to ensure lasting relationships with team members.

Requirements

• Security Clearance - A current TS/SCI level U.S. Government clearance with Polygraph is required.
• U.S. Citizenship required.
• 5+ years experience in cyber security operations related fields with Bachelors in Information Technology, Cyber Security or related field; 3 years relevant experience with Masters in realted field; or High School Diploma or equivalent and 9 years relevant experience.
• Experience with the DoD customers, ideally supporting US Cyber Command, USMC, DISA or DCDC.
• Proficient in various query languages (SQL, KQL (Kusto)).
• Proficient in Python and bonus for strong experience using Jupyter notebooks.
• Experience with dashboarding/visualizations (Power-BI, Superset).
• Familiarity with cloud providers and environments (Azure, AWS, Google Cloud Platform).

Qualifications

• Desire to grow professional and personally.
• Ability to complete technical tasks without supervision.
• Ability to foster and support a collaborative working environment.
• Excellent public speaking, presentation, and customer service skills.
• Positive and energetic attitude.
• Critical thinking and natural curiosity for all things cybersecurity.
• Cyber Hunt methodologies and techniques.
• SIEMs - (e.g., Splunk, Q-Radar, ELK)
• SOARs (e.g., Sentinel, CORTEX, X-SOAR)
• Developing and deploying threat detection signatures.
• Detecting host and network-based intrusions.
• Collecting data from a variety of cyber defense resources. (e.g., CVE, OSINT)
• Recognizing and categorizing types of vulnerabilities and associated attacks.
• Reading and interpreting signatures (e.g., SNORT, SIGMA, Yara, YAML)
• Cyber defense and vulnerability assessment tools and their capabilities.
• Network traffic analysis methods (e.g.,TCP-DUMP, Wireshark, Bro/Zeek)
• Familiar with cyber attack stages (e.g., reconnaissance, scanning, enumeration, gaining access, escalation of privileges, maintaining access, network exploitation, covering tracks), and incident response and handling methodologies. (e.g., MITRE ATT&CK, LM Killchain)
• Intrusion Detection System (IDS)/Intrusion Prevention System (IPS) tools and applications.
• Must have or ability to obtain within 90 days of hire - Data+, Security+, CySA+, GCIH, GNFA, GCFA or other industry recognized Cybersecurity Certification.

Skills

• Data+
• Security+
• CySA+
• GCIH
• GNFA
• GCFA

Benefits

• 100% paid employee premium for healthcare, vision and dental plans.
• 10% 401k benefit.
• Generous PTO + 10 paid holidays.
• Education/training allowances.

Pay

Anticipated Salary Range: $118,987.00 - $165,000.00. The salary range for this role is intended as a good faith estimate based on the role's location, expectations, and responsibilities. When extending an offer, Enlighten takes a variety of factors into consideration which include, but are not limited to, the role's function, internal equity and a candidate's education or training, work experience, certifications and key skills.

Schedule

Occasionally positions/roles may include additional non-recurrent compensation and will be addressed by the recruiter during the interview process.