SOC Cyber Threat Hunter/Incident Handler

Responsibilities Our team, in Chesapeake, VA has an immediate need for a Security Operations Center Analyst (Cyber Threat Hunter) to monitor and maintain an active defense security posture by preventing, monitoring, detecting, and responding to cybersecurity threats. Primary responsibilities include:

• Support day-to-day Cyber Security Service Provider (CSSP) intrusion detection and prevention operations
• Perform tactical real-time data monitoring of alert, session, statistical, and full packet capture data
• Operate and monitor intrusion-sensing and packet capture tools, such as Wireshark, WinDump, and TCPDump, as well as Security Information and Event Management (SIEM) tools and CSSP security to monitor MSC networks
• Examine alerts generated, perform triage, and determine the scope of the threats
• Perform data correlation and conduct strategic analysis of IDS/IPS data, frequently reconfiguring and updating CSSP security devices with the latest signatures and heuristic techniques to detect and/or prevent the latest threats

Requirements Secret Clearance (US Citizen)

Must possess IAT Level II or higher

Sec+ or higher