Jobs · OTHR · North Carolina

Please review the following job description:

CyberJobs.Com · Zebulon, NC · 1 mo ago
OTHRFull-time
We need to output HTML fragment with sections only if content present. Must include h3 for headings: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. We need to map content. From posting: Title: Cyber Hunt & Respond Senior Engineer (but we don't repeat title as heading). We have description: "The Cyber Hunt & Respond Senior Engineer is an advanced, after-hours role within the 24/7 Cyber Fusion Center. This role has 2 core functions, proactive Threat Hunting & reactive Incident Response coverage." That's about the role. So we can have

About the role

with paragraph(s). Responsibilities: list of duties under "Essential Duties And Responsibilities". Provide bullet list. Requirements: maybe "Regular Or Temporary Regular Language Fluency: English (Required)" and "Work Shift 3rd Shift - 15% Automatic Pay Differential". Also shift details: "Work Shift 3rd Shift - 15% Automatic Pay Differential (United States of America)". Also "Work Location: Onsite (Zebulon, NC)". Also shift times: "***3rd Shift Requirements: 11pm to 7am, Sunday (PM) thru Friday (AM)***". Also "Regular Or Temporary Regular". So we can put Requirements section with language fluency, shift, location, maybe work type. Qualifications: Required Qualifications and Preferred Qualifications. So we can have

Qualifications

with sub? But spec says use h3 for section headings only. We can include both required and preferred within same section using paragraphs or lists. Skills: maybe not explicit separate; could be part of qualifications. But we could create Skills section if there is explicit skill list. There's mention of "Deep specialized knowledge in cybersecurity principles..." etc. Might be better to put under Qualifications. Benefits: there is "General Description of Available Benefits for Eligible Employees of Truist Financial Corporation:" with details. So we can have Benefits section. Pay: there is mention of "+15% Shift Differential for 3rd shift". Also "Work Shift 3rd Shift - 15% Automatic Pay Differential". So we have pay differential info. So we can create Pay section with that detail. Schedule: shift times: "11pm to 7am, Sunday (PM) thru Friday (AM)". So we can create Schedule section. We must not include boilerplate like EEO, etc. Also remove duplicated lines. We must not create sections with filler like "commensurate with experience". Not present. We must preserve all substantive info. Let's extract: About the role paragraph(s): - "The Cyber Hunt & Respond Senior Engineer is an advanced, after-hours role within the 24/7 Cyber Fusion Center. This role has 2 core functions, proactive Threat Hunting & reactive Incident Response coverage. Hunting involves searching through large, diverse sets of internal and external data to discover previously undetected threats. This role is creative and responsible for developing with new hypotheses on how adversaries may be attacking the organization and will prove out the hypotheses based on our available data. Additionally, this role will work with internal groups to express the data needs to explore potential threats. As an important member of the Cyber Fusion Center (CFC), enjoy one of the most exciting and dynamic teams within Truist, with the critical mission of defending against advanced cyber-attacks." We could split into two paragraphs but okay. Responsibilities list: - Conduct proactive threat hunting activities to identify previously unknown or undetected threats across enterprise environments. - Develop, test, and validate threat-hunting hypotheses using internal and external data sources. - Perform digital forensics and incident response activities, including investigation, root cause analysis, containment, eradication, and recovery. - Analyze endpoint, network, packet, log, and forensic data to identify malicious activity and determine attack scope and impact. - Leverage data analysis, automation, and programming techniques to process large datasets and improve threat detection and response capabilities. - Create and maintain searches, visualizations, analytic content, and advanced detection methodologies to identify emerging threats. - Investigate suspicious artifacts and activity to distinguish malicious behavior from legitimate business operations. - Collaborate with security, technology, and business teams to identify data requirements and enhance threat visibility across the organization. - Provide technical consultation and subject matter expertise on cybersecurity incidents, investigations, and threat-hunting initiatives. - Present findings, lessons learned, and threat intelligence to technical and non-technical audiences. - Mentor and provide guidance to team members in threat hunting, digital forensics, incident response, and related disciplines. Requirements: - Language Fluency: English (Required) - Work Shift: 3rd Shift - 15% Automatic Pay Differential (but that's pay; maybe separate) - Work Location: Onsite (Zebulon, NC) - Shift schedule: 11pm to 7am, Sunday (PM) thru Friday (AM) - Employment type: Regular (maybe "Regular Or Temporary Regular"? Actually says "Regular Or Temporary Regular". We'll include "Regular" as employment type. We could combine shift and pay differential in Requirements or separate Pay and Schedule sections. Qualifications: Required: - Bachelor’s degree or equivalent education, training, and work-related experience. - Minimum of 7 years of experience in security engineering or related cybersecurity roles. - Deep specialized knowledge in cybersecurity principles, theories, and concepts. - Proven experience in software development lifecycle security practices. - Deep knowledge of threat modeling, security testing, and penetration testing. - Experience implementing and managing complex information security technologies. Preferred: - Strong knowledge of cybersecurity principles, network security, and modern identity and access management (IAM). - Experience with network traffic analysis, packet capture analysis, and associated tools (e.g., Wireshark, tcpdump). - Knowledge of Windows and Linux/Unix operating systems, internals, services, and file systems. - Understanding of phishing techniques, advanced cyber threats, vulnerabilities, and adversary tactics, techniques, and procedures (TTPs). - Experience with threat hunting, intrusion detection, incident response, and digital forensics investigations. - Knowledge of digital evidence collection, preservation, and forensic artifact analysis. - Experience leveraging automation, scripting, machine learning, and AI to support cybersecurity operations. - Experience working in cloud environments, including Microsoft Azure and Amazon Web Services (AWS). - Relevant technology or cybersecurity certifications (e.g., Security+, CySA+, GCIH, GCFA, GCFE, GNFA, GREM, Azure, AWS). - Experience in Cyber Incident Response, Threat Hunting, Security Operations Centers (SOC), Network Operations Centers (NOC), Cybersecurity Engineering, or Intelligence Community environments. Skills: maybe not separate; we could omit Skills section if no explicit skills list beyond qualifications. But we could treat some as skills. However instruction: prefer few substantive sections over many thin ones. So we could combine Qualifications and Skills into one Qualifications section. But we have separate headings allowed; we could still include Skills if we have content. There's no explicit "Skills" heading; but we could extract skills like "Deep knowledge of threat modeling, security testing, penetration testing", "Experience with network traffic analysis", etc. Might be redundant. Better to have sections: About the role, Responsibilities, Qualifications, Benefits, Pay, Schedule. Requirements maybe merged into Qualifications? But Requirements includes language fluency, shift, location, employment type. Could be separate Requirements section. Let's decide sections: - About the role (h3) - Responsibilities (h3) - Requirements (h3) (language fluency, work shift, location, employment type) - Qualifications (h3) (required and preferred) - Benefits (h3) - Pay (h3) (shift differential) - Schedule (h3) (shift times) Check if any content missing: Pay section: we have "+15% Shift Differential for 3rd shift" and "Work Shift 3rd Shift - 15% Automatic Pay Differential". So we can put that. Schedule: "11pm to 7am, Sunday (PM) thru Friday (AM)". Now ensure we don't repeat info. Requirements includes shift? Might duplicate with Schedule. Better to keep Requirements for language fluency, location, employment type. Schedule separate for times. Pay separate for differential. Thus Requirements: Language Fluency: English (Required); Work Location: Onsite (Zebulon, NC); Employment Type: Regular (maybe "Regular Or Temporary Regular" but we can say Regular). We'll keep as "Regular". Now produce HTML. We must not include any markdown fences. Just raw HTML. Let's craft:

About the role

The Cyber Hunt & Respond Senior Engineer is an advanced, after-hours role within the 24/7 Cyber Fusion Center. This role has 2 core functions, proactive Threat Hunting & reactive Incident Response coverage. Hunting involves searching through large, diverse sets of internal and external data to discover previously undetected threats. This role is creative and responsible for developing with new hypotheses on how adversaries may be attacking the organization and will prove out the hypotheses based on our available data. Additionally, this role will work with internal groups to express the data needs to explore potential threats. As an important member of the Cyber Fusion Center (CFC), enjoy one of the most exciting and dynamic teams within Truist, with the critical mission of defending against advanced cyber-attacks.

Responsibilities

  • Conduct proactive threat hunting activities to identify previously unknown or undetected threats across enterprise environments.
  • Develop, test, and validate threat-hunting hypotheses using internal and external data sources.
  • Perform digital forensics and incident response activities, including investigation, root cause analysis, containment, eradication, and recovery.
  • Analyze endpoint, network, packet, log, and forensic data to identify malicious activity and determine attack scope and impact.
  • Leverage data analysis, automation, and programming techniques to process large datasets and improve threat detection and response capabilities.
  • Create and maintain searches, visualizations, analytic content, and advanced detection methodologies to identify emerging threats.
  • Investigate suspicious artifacts and activity to distinguish malicious behavior from legitimate business operations.
  • Collaborate with security, technology, and business teams to identify data requirements and enhance threat visibility across the organization.
  • Provide technical consultation and subject matter expertise on cybersecurity incidents, investigations, and threat-hunting initiatives.
  • Present findings, lessons learned, and threat intelligence to technical and non-technical audiences.
  • Mentor and provide guidance to team members in threat hunting, digital forensics, incident response, and related disciplines.

Requirements

  • Language Fluency: English (Required)
  • Work Location: Onsite (Zebulon, NC)
  • Employment Type: Regular

Qualifications

Required Qualifications

  • Bachelor’s degree or equivalent education, training, and work-related experience.
  • Minimum of 7 years of experience in security engineering or related cybersecurity roles.
  • Deep specialized knowledge in cybersecurity principles, theories, and concepts.
  • Proven experience in software development lifecycle security practices.
  • Deep knowledge of threat modeling, security testing, and penetration testing.
  • Experience implementing and managing complex information security technologies.

Preferred Qualifications

  • Strong knowledge of cybersecurity principles, network security, and modern identity and access management (IAM).
  • Experience with network traffic analysis, packet capture analysis, and associated tools (e.g., Wireshark, tcpdump).
  • Knowledge of Windows and Linux/Unix operating systems, internals, services, and file systems.
  • Understanding of phishing techniques, advanced cyber threats, vulnerabilities, and adversary tactics, techniques, and procedures (TTPs).
  • Experience with threat hunting, intrusion

Similar jobs

Employment Specialist.

State of ColoradoDenver, CO· 3 mo ago
Human Resources$56k–$58k/yrapply on governmentjobs.com

HUMAN RESOURCES SPECIALIST.

Office of Naval ResearchWashington, District of Columbia, United States· 2 mo ago
Human Resourcesapply on usajobs.gov