Cyber Threat Hunt Analyst
About the role
At Accenture Federal Services, nothing matters more than helping the US federal government make the nation stronger and safer and life better for people. Our 13,000+ people are united in a shared purpose to pursue the limitless potential of technology and ingenuity for clients across defense, national security, public safety, civilian, and military health organizations. Join Accenture Federal Services, a technology company within global Accenture. Recognized as a Glassdoor Top 100 Best Place to Work, we offer a collaborative and caring community where you feel like you belong and are empowered to grow, learn and thrive through hands-on experience, certifications, industry training and more. Join us to drive positive, lasting change that moves missions and the government forward! We are seeking a Cyber Threat Hunt Analyst to provide subject-matter expertise on a federal agency's proactive threat hunting mission. You will lead complex hunt missions, mentor junior hunters, and deploy to remote and air-gapped environments to extend security visibility across the agency's most sensitive systems. You will also be a key contributor to the team's long-term hunt roadmap, helping decide which threat actors, TTPs, and environments deserve the next hunt mission's focus.
Responsibilities
- Lead complex threat hunting missions against enterprise networks, systems, and high value assets, including deployments using the CTH Fly-Away Kit (FAK).
- Fuse Threat Intelligence and prior hunt findings to formulate advanced attacker-activity hypotheses.
- Mentor junior and mid-level hunt analysts in hunt methodology and tradecraft.
- Drive creation of new detection content resulting from hunt missions and Purple Team engagements.
- Author Executive Summaries and Situation Reports for extended hunt missions.
- Serve as technical lead for Purple Team engagements, coordinating with the Penetration Testing Team and Detection Engineering.
- Contribute to the CTH team's long-term hunt roadmap and prioritization of hunt targets.
- Represent the CTH team in security observation reviews and cross-functional findings discussions.
Required Qualifications
- US Citizenship
- 10+ years of related experience; BS degree (or 4 additional years as substitute)
- A minimum of seven (7) years of incident detection/response, malware analysis, or cyber forensics experience (or bachelor's degree plus five (5) years)
- Extensive experience analyzing and synthesizing