Threat Hunter

🔥 0 minutes ago

⚔️ Virginia – Remote

⚔️ Virginia – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

🕵️ Threat Intelligence Specialist

👻 Ghost score 10%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.Why this score:

• Just posted.
• Jobs at this company usually fill in 21 days.
• No salary listed.

Apply Now

Find Similar Remote Jobs

ShorePoint Inc

WebsiteLinkedInAll Job Openings

1 - 10 employees

💼 Consulting

🏥 Healthcare

📦 Logistics

Consulting • Healthcare • Logistics

ShorePoint Inc. is a privately-held cybersecurity services company that aims to be the premier provider of cybersecurity services in today's rapidly evolving landscape. Founded by cybersecurity veterans, the company focuses on providing effective cyber defense strategies across the full cyber lifecycle. ShorePoint specializes in various areas including Continuous Diagnostics and Mitigation (CDM), threat protection, security compliance, and information protection. With a strong emphasis on supporting both public and private sector clients, the firm leverages its expertise to protect critical assets from cyber threats, fostering a collaborative and innovative corporate culture.

📋 Description

• Provide first-line SOC support across 24x7x365 operations, including alert monitoring, triage, routing, escalation and response • Monitor, analyze and investigate security events, network traffic and host-based detections • Perform proactive threat hunting and anomaly detection across SIEM and security tools • Conduct incident investigation, Cyber Threat Assessment and Remediation Analysis • Process and correlate incident indicators with threat intelligence • Tune and develop SIEM correlation rules, detection logic and detection use cases • Develop and maintain Python and Bash scripts and tools to automate SOC and incident response functions • Build IoC ingestion, log processing and SIEM integrations via APIs • Develop dashboards, visualizations and analytics for detection, reporting and SOC performance monitoring • Produce and maintain cybersecurity briefings, metrics, incident reports and stakeholder deliverables • Support threat intelligence operations by reviewing IoCs and translating intelligence into actionable detections • Coordinate with internal teams on Insider Threat, ROE, threat hunting, testing and after-action reporting • Support ticket tracking, customer security assessments, ad hoc investigations, tabletop exercises and lessons learned • Improve SOC detection capabilities, processes, communication and operational effectiveness • Participate in the rotating SOC on-call schedule

🎯 Requirements

• 5+ years of technical experience • Deep understanding of cyber threat TTPs, threat hunting methodologies and the MITRE ATT&CK framework • Experience supporting 24x7x365 SOC operations, including alert monitoring, triage, analysis, response and threat intelligence review/action • Ability to manage multiple alerts and tickets in parallel and perform end-to-end triage through resolution • Experience analyzing and correlating security events across endpoint, network, email security tools, SIEM platforms and federal threat intelligence such as CISA • Proficiency with enterprise security tools and platforms including FireEye, Elastic, Sourcefire, Malwarebytes, Carbon Black/Bit9, Splunk, Prisma Cloud, Cisco IronPort, Bluecoat, Palo Alto, Cylance and OSSEC • Hands-on experience with enterprise SIEM or security analytics platforms such as Elastic Stack and Splunk • Experience with malware analysis and attack vectors involving malware, data exposure, phishing and social engineering • Experience developing and maintaining SOPs • Experience performing event timeline analysis and investigating logs across Windows/Linux environments and network security devices • Ability to work 8:45 AM–5:15 PM Eastern Time • Ability to participate in a rotating SOC on-call schedule • Proficiency with one or more toolsets such as Bit9/CarbonBlack, CrowdStrike, FireEye ETP and Elastic Kibana • U.S. citizenship required for federal contract compliance • Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Mathematics, Engineering or a related field is beneficial • One or more certifications such as GIAC, CEPT, CASS, CWAPT or CREA is beneficial

🏖️ Benefits

• 144 hours of PTO • 11 holidays • 85% of insurance premiums covered • Healthcare benefits through major carriers • 401(k) • Continuing education • Certification maintenance and reimbursement • Career development opportunities • Technical and professional growth support

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume