Network Administrator # 26-25143

Contract duration: 12 months. Onsite in Blythewood, SC; local South Carolina candidates preferred.

Responsibilities

• Threat Intelligence Research
  • Monitor and analyze threat intelligence feeds to identify emerging threats relevant to the organization.
  • Document findings, such as new attack methods or vulnerabilities, and share with the team.
  • Use open-source intelligence (OSINT) tools to gather data on potential risks and adversaries.
• Threat Hunting and Detection Rule Creation
  • Conduct proactive searches for suspicious behavior in network and endpoint activity using provided tools and playbooks.
  • Utilize threat feeds, investigate suspicious activity, and stay current on cyber threats.
  • Collaborate with senior analysts to refine and test detection rules (e.g., SIEM queries or Defender for Endpoint rules).
  • Document hunting methodologies and findings to support continuous improvement.
• Log Analysis
  • Review and interpret logs from firewalls, endpoints, and servers to identify indicators of compromise (IOCs).
  • Escalate findings, such as anomalous IP addresses or unauthorized access attempts, to senior analysts.
  • Maintain a log of recurring patterns or anomalies for long-term tracking and analysis.
• Incident Response
  • Assist in initial triage of security incidents by following response frameworks (e.g., NIST, MITRE ATT&CK).
  • Identify and escalate potential security threats.
  • Gather and analyze relevant evidence, such as logs or alert data, to determine the scope and severity of incidents.
  • Document findings during incidents and contribute to containment and remediation efforts.
• Documentation, Reporting, and Communication
  • Create clear