Cybersecurity Hunt Team

Job Description

Description

Cybersecurity Hunt Team / Computer Forensic & Intrusion Analyst - is responsible for ensuring information security efforts are implemented as a function of the Information Technology Engineering life cycle to reduce risks, respond to incidents and limiting exposure to liability and risk to technology systems, networks, and applications.  Candidate will apply existing strong policy and process knowledge, as well as deep skill and expertise, for the development and implementation of security standards, procedures, guidelines and tools for multiple platforms and diverse system environments.  Must be a team player, willing to work challenging assignments and tasks concerning Cyber Security, Information Assurance and Computer Network Defense policy, procedures and guidance; must be willing to travel, on occasion, throughout the AOR (which includes Afghanistan, Iraq, Bahrain, Qatar, and other Southwest Asia nations).
 
 Primary Job Responsiblilities:

• Implement Cyber Security processes for the Cyber Operations / Cybersecurity Operations Cell (CSOC) Branch and Hunt team; develop tools and processes to define, deter, detect and defend USCENTCOM networks against internal and external threats attempting to gain access or exploit critical information, infrastructure and systems.  
• Candidate will participate as a member of integrated government/contractor teams of technical and subject matter experts conducting Cyber Security, Information Assurance / Computer Network Defense (IA/CND), Incident Handling and Response in support of HQ USCENTCOM.  
• Independently conduct Hunt operations using combinations current threat intelligence, individual research, statistical analysis, and industry standard tools.
• Duties include anomaly detection, tracking, reporting and response specifically targeted towards computer or network security incidents; investigations of events and detailed analysis are required.
• Create correlations and other logic to identify attackers and defend the network against advanced attacks.
• Candidate will be responsible to provide reports, briefings, and updates to senior Military/Government/Contractor leadership, academic and executive audiences.
• Candidate will provide expert analytical support that includes research, documentation and development of tactics, techniques, and procedures to support Active Cyber Defense and IA/CND mission. 
• Manage escalated security issues from investigation through recommendation and remediation plan implementation.
• Identify and address key threats, controls, and operational gaps to ensure a solid security practice.
• Mentor junior security analysts in any areas of personal or professional subject mastery.

Qualifications

Experiences Requirements:

• 9 years demonstrated Information Security Incident Response, Cyber Threat Hunting including Indicators of Compromise (IOC) & Tactics and Techniques & Procedures (TTPs) development. 
• Excellent interpersonal skills, outstanding oral and written communication skills, good organizational skills, ability to work in a team and work independently. 

 
 Education and/or Certifications: 

• Bachelor's degree in Computer Science, Engineering, or related discipline (Cybersecurity or Information Assurance concentration preferred) or nine (9) years of real-world or military experience in information assurance, network security or close-related experience is required. 
• Candidate must be 8570 compliant (minimum Security+) and requires additional Certified Ethical Hacker (CEH) Certification, or equivalent.

 
Required Skills: 

• Candidate must have experience within the USCENTCOM AOR and must be familiar with its mission. 
• Candidate must have a solid familiarity with application and network security.  Must be able to provide technical subject matter expertise for a wide range of security technologies including, but not limited to Security Information Event Management (SIEM) Intrusion Protection and Intrusion Detection Systems (IDS/IPS), Host Intrusion Detection System (HIDS), malware analysis and protection, content filtering, perimeter access controls, logical access controls, identity and access management, and data loss prevention.
• Candidate must have strong communications skills both verbally and in writing.
• Candidate must have an understanding of vulnerabilities, exploits, and practical working knowledge of DoD Cyber Security program. 
• Candidate must be able to read and understand DoD Cyber Security orders, policies and procedures.
• Experience briefing senior military and civil service employees

 
Desired Skills:

• Military Experience (Active Duty or Reserves)
• IAT/IAM Level III Certification
• Experience with Host Based Security System (HBSS), Firewall and ARCSIGHT software
• Experience with Cyber Security in a Joint and Coalition Partner environment

Overview

SAIC® is a premier Fortune 500® technology integrator driving our nation's technology transformation. Our robust portfolio of offerings across the defense, space, civilian, and intelligence markets includes secure high-end solutions in engineering, digital, artificial intelligence, and mission solutions. Using our expertise and understanding of existing and emerging technologies, we integrate the best components from our own portfolio and our partner ecosystem to deliver innovative, effective, and efficient solutions that are critical to achieving our customers' missions.

We are more than 26,500 strong; driven by mission, united by purpose, and inspired by opportunities. SAIC is an Equal Opportunity Employer, fostering a respectful work culture based on diversity, equity, and inclusion that values all contributors. Headquartered in Reston, Virginia, SAIC has annual revenues of approximately $7.1 billion. For more information, visit saic.com.