Lead Cyber Hunt Analyst - 37998

Job Description

Enlighten, a HII company is looking for an experienced Cyber Hunt/Data Analysis Lead to apply strong cyber security, Defensive Cyber Operations (DCO) and networking domain knowledge to support cyber analytics product development and modeling, threat analysis, and direct customer mission support. Regular activities consist of hunting for threats, reporting on findings, and converting tools, techniques, and processes into automated capabilities for the current cyber platform, and leading a small team of analysts performing the same functions. Will also be responsible for collecting customer Cyber Operations requirements, generating use cases, providing Cyber SME support and system training to end users.

Security Clearance:

• Current TS/SCI with Polygraph level security clearance is required and therefore all candidates must be a U.S. Citizen.

• Bachelor's Degree in Information Technology, Cybersecurity or similar field. Educational requirements may be adjusted for applicable work experience. Work experience may be adjusted for highly specialized knowledge or uniquely applicable experience.
• 6+ years of experience in cyber operations related fields.
• Experience leading small teams of analysts from the front lines, participating in the activities that the team is performing and leading by example.
• Understanding of how to prioritize competing requirements to effectively utilize available resources.
• Knowledge of Defensive Cyber Operations (DCO), including threat hunting methodologies.
• Technical experience to cyber data analysis to include continuous monitoring, intelligence, and reporting.
• Ability to abstract threat hunting concepts to look at the 'big picture' and discover threats that aren't captured by traditional methods (e.g. SIEMs).
• Experience in big data analysis and reporting.
• Advanced experience in using cyber tools, defensive toolkits, endpoint and network sensors, SIEMs, and threat sharing platforms (e.g. MISP).
• Advanced experience with the MITRE ATT&CK framework and associated TTPs.
• Leverages an understanding of enterprise IT infrastructure, systems monitoring, and networking to identify suspicious patterns and behaviors within the ecosystem.
• Excellent verbal, written, analytical, and presentation skills.
• Ability to multi-task in a deadline-oriented environment.
• Demonstrated ability to work well independently with little input, and as a part of a team.
• Excellent work ethic and a high commitment to quality.
• Ability to travel up to 25% of the time.

• Prior experience interfacing, consulting and training customers is a big plus.
• Prior military experience as a team lead, squad leader, platoon leader, LPO/LCPO, etc. are applicable to the leadership requirements of this position
  *CJ
• Security+ certification.
• CISSP, CEH or similar certification.