Threat Hunting Analyst
Posted on :
05-12-2023
Employer Active
1 Vacancy
The job posting is outdated and position may be filled
Job Alert
You will be updated with latest job alerts via emailValid email field required
Send jobs
Share
Send me jobs like this
Job Alert
You will be updated with latest job alerts via emailValid email field required
Send jobs
Job Description
- Working Location: Mons Belgium
- Security Clearance: NATO Secret
- Language: High proficiency level in English language
EXPERIENCE AND EDUCATION:
Essential Qualifications/Experience:
A university degree at a nationally recognised/certified University in a technical subject with substantial Information Technology (IT) content and two years of specific experience. Exceptionally the lack of a university degree may be compensated by the demonstration of a candidates particular abilities or experience that is/are of interest to NCI Agency; that is at least 4 years extensive and progressive expertise in the duties related to the function of the post
Comprehensive knowledge of the principles of computer and communications security networking and the vulnerabilities of modern operating systems and applications
Experience in analysis of threat actor group attack patterns tactics techniques and procedures (TTPs).
Knowledge of the TaHiTI threat hunting methodology and the MITRE ATT&CK framework
Strong analytical and problemsolving abilities ability to identify patterns detect anomalies and make accurate informed decisions
Experience in performing indepth cyber security analysis in large complex networks using security use cases relevant datasets and documentation
Expertise in at least three of the following areas and a high level of experience in several of the other areas:
Cyber security threat hunting
Security Information and Events Management systems (SIEM) e.g. Splunk
Splunk processing language
Network and host based intrusion detection systems
Sysmon configuration Windows and Linux log analysis
Full Packet Capture systems (FPC) e.g. Niksun RSA/NetWitness
Data visualisation and statistical analysis
Technical report writing
Desirable Qualifications/Experience:
A good understanding of Security Orchestrations Automation and Response (SOAR) concepts and their benefits to the protection of CIS infrastructures
Strong knowledge of malware families and network attack vectors
Experience in intrusion detection and incident handling
Ability to analyse attack vectors against a particular system to determine attack surface
Industry leading certification in the area of cyber security such as GCFA GCIA GNFA
DUTIES/ROLE:
Provide subject matter expertise supporting the endtoend threat hunting process
Develop hypotheses to be used in a threat hunt for given threat groups
Create security tool content such as searches reports and dashboards to facilitate threat hunting
Perform indepth analysis to deliver conclusions and recommendations
Review and develop logging configurations to enable a comprehensive threat hunting capability
Develop and document threat hunting procedures
Document analysis findings and recommendations in reports and presentations to be delivered to stakeholders
Tasks in support of NATO network monitoring and other NCSC Operations branch activities
Comprehensive knowledge of the principles of computer and communications security networking and the vulnerabilities of modern operating systems and applications
Experience in analysis of threat actor group attack patterns tactics techniques and procedures (TTPs).
Knowledge of the TaHiTI threat hunting methodology and the MITRE ATT&CK framework
Strong analytical and problemsolving abilities ability to identify patterns detect anomalies and make accurate informed decisions
Experience in performing indepth cyber security analysis in large complex networks using security use cases relevant datasets and documentation
Expertise in at least three of the following areas and a high level of experience in several of the other areas:
Cyber security threat hunting
Security Information and Events Management systems (SIEM) e.g. Splunk
Splunk processing language
Network and host based intrusion detection systems
Sysmon configuration Windows and Linux log analysis
Full Packet Capture systems (FPC) e.g. Niksun RSA/NetWitness
Data visualisation and statistical analysis
Technical report writing
Desirable Qualifications/Experience:
A good understanding of Security Orchestrations Automation and Response (SOAR) concepts and their benefits to the protection of CIS infrastructures
Strong knowledge of malware families and network attack vectors
Experience in intrusion detection and incident handling
Ability to analyse attack vectors against a particular system to determine attack surface
Industry leading certification in the area of cyber security such as GCFA GCIA GNFA
DUTIES/ROLE:
Provide subject matter expertise supporting the endtoend threat hunting process
Develop hypotheses to be used in a threat hunt for given threat groups
Create security tool content such as searches reports and dashboards to facilitate threat hunting
Perform indepth analysis to deliver conclusions and recommendations
Review and develop logging configurations to enable a comprehensive threat hunting capability
Develop and document threat hunting procedures
Document analysis findings and recommendations in reports and presentations to be delivered to stakeholders
Tasks in support of NATO network monitoring and other NCSC Operations branch activities
Employment Type
Full Time
Key Skills
Report This Job
Disclaimer: Drjobpro.com is only a platform that connects job seekers and employers. Applicants are advised to conduct their own independent research into the credentials of the prospective employer.We always make certain that our clients do not endorse any request for money payments, thus we advise against sharing any personal or bank-related information with any third party. If you suspect fraud or malpractice, please contact us via contact us page.
