Threat Hunt Analyst with Security Clearance

Primary Responsibilities:

• Create Threat Models to better understand the DHS IT Enterprise, identify defensive gaps, and prioritize mitigations

• Author, update, and maintain SOPs, playbooks, work instructions

• Utilize Threat Intelligence and Threat Models to create threat hypotheses

• Plan and scope Threat Hunt Missions to verify threat hypotheses

• Proactively and iteratively search through systems and networks to detect advanced threats

• Analyze host, network, and application logs in addition to malware and code

• Prepare and report risk analysis and threat findings to appropriate stakeholders

• Create, recommend, and assist with development of new security content as the result of hunt missions to include signatures, alerts, workflows, and automation.

• Coordinate with different teams to improve threat detection, response, and improve overall security posture of the Enterprise Basic Qualifications:

• Positions at this career level typically require BS degree or equivalent and 2-4 years of prior relevant experience, or a master's with less than 2 years, in order to operate within the scope contemplated by the level.

• The candidate must currently possess a Top Secret Clearance. In addition to clearance requirement, all CBP personnel must have a current or be able to favorably pass a 5 year background investigation (BI).
• Experience in the areas of incident detection and response, malware analysis, or computer forensics.