Senior Incident Responder / Threat Hunter

Job description

Who we are: ShorePoint is a fast-growing, industry-recognized and award-winning cybersecurity services firm focused on high-profile, high-threat public- and private-sector customers who demand experience and proven security models to protect their data. We embrace a ‘work hard, play hard’ mentality and celebrate individual and company successes. We are passionate about our mission and going above and beyond to deliver for our customers, while fostering an environment that supports creativity, accountability, mission success, critical thinking and a desire to give back to our community. The Perks: As recognized members of the Cyber Elite, we work together in partnership to defend our nation’s critical infrastructure while building meaningful and exciting career development opportunities in a culture tailored to the individuals technical and professional growth. We are committed to the belief that our team members do their best work when they are happy and well cared for. In support of this philosophy, we offer a comprehensive benefits package, including major carriers for health care providers. Highlighted benefits offered: 144 hours of PTO, 11 holidays, 85% of insurance premium covered, 401k, continued education, certifications maintenance and reimbursement and more. Who we’re looking for: We are seeking a highly capable Senior Incident Responder / Threat Hunter for a potential opportunity with demonstrated experience in proactive threat hunting, cyber threat intelligence integration, incident investigation and digital evidence handling. The ideal candidate will possess strong investigative instincts, a deep understanding of adversary Tactics, Techniques and Procedures (TTPs) and the ability to translate findings into defensive action. The Sr. Incident Responder / Threat Hunter role leads structured threat hunts, complex Incident Response (IR) actions, technical investigations and forensic fact-finding efforts to detect and mitigate malicious activity across enterprise environments. This is a unique opportunity to shape the growth, development and culture of an exciting and fast-growing company in the cybersecurity market. Employment for this position is dependent on the successful award of the contract. What you’ll be doing: Lead structured monthly threat hunts, documenting hypotheses, rationale, methods, findings, what is being hunted, why the hunt is being conducted and recommended detection improvements. Perform proactive threat hunting across available telemetry sources to detect, identify and neutralize malicious activity and cybersecurity threats that evade traditional perimeter controls. Lead or support IR, reporting, handling and resolution activities, conducting technical investigations and fact-finding for suspected or confirmed security incidents and security concerns. Perform cybersecurity threat intelligence gathering from open and closed sources to integrate threat intelligence into hunts, detections and operational alerting capabilities for specific systems and applications. Perform digital forensic investigations to collect, preserve and analyze digital evidence, supporting comprehensive IR, fact-finding and technical coordination with IR stakeholders. Perform day-to-day continuous monitoring telemetry reviews and log analysis to support ongoing threat detection, event tracking and incident investigations. Identify gaps in detection coverage and recommend improvements to reduce risk, improve visibility and track metrics related to detection queries and identified security gaps. What you need to know: Experience in IR, threat hunting and cyber threat intelligence analysis. Familiarity with adversary TTPs, detection engineering concepts and forensic handling practices. Strong analytical and investigative skills with the ability to derive actionable conclusions from telemetry and intelligence. Experience documenting hunt results, lessons learned and recommendations for operational improvement. Ability to communicate technical findings to both technical and non-technical audiences. Must have’s: Bachelor’s degree from an accredited university; a postgraduate degree from an accredited university may substitute for 6 years of experience. 10+ years of relevant work experience. Proven ability to analyze complex requirements and translate them into clear, actionable tasks and processes through critical thinking. Applicants must currently be a U.S. citizen and eligible to obtain and maintain a security clearance, in compliance with federal contract requirements. Beneficial to have: Active DOE Q or equivalent DoD Top Secret clearance. Where it’s done: Onsite (Albuquerque, NM).