Threat Hunting Analyst – Remote

One of the largest public institutions is looking for an experienced Threat Hunting Analyst to join a long-term assignment.

Intrusion/Incident Detection and Handling
Computer and communications security, networking, and the vulnerabilities of modern operating systems and applications.

Expert level in at least three of the following areas and a high level of experience in several of the other areas;
Cybersecurity threat hunting.
MITRE ATT&CK Framework;
Security Incidents Event Management products (SIEM) – e.g. Splunk;
Splunk Processing Language;
Network Based Intrusion Detection Systems (NIDS) – e.g. SourceFire, Palo Alto
Network Threat Prevention;
Host Based Intrusion Detection Systems (HIDS);
Sysmon;
Full Packet Capture systems – e.g. Niksun, RSA/NetWitness;
Computer security tools (Vulnerability Assessment, Anti‐virus, Protocol Analysis,
Anti‐Virus, Protocol Analysis, Anti‐Spyware, etc);