What are the responsibilities and job description for the Threat Hunter position at Access Point Consulting?
Description
We are looking for a full-time Threat Hunter to join our team This person will proactively identify, analyze, and mitigate advanced security threats to protect our clients' assets. Leveraging cutting-edge tools and techniques, you will be responsible for uncovering sophisticated cyber threats, enhancing detection capabilities, and providing actionable insights to fortify defenses.
Duties/Responsibilities
Required Skills/Abilities:
We are looking for a full-time Threat Hunter to join our team This person will proactively identify, analyze, and mitigate advanced security threats to protect our clients' assets. Leveraging cutting-edge tools and techniques, you will be responsible for uncovering sophisticated cyber threats, enhancing detection capabilities, and providing actionable insights to fortify defenses.
Duties/Responsibilities
- Conduct proactive hunting activities to identify potential threats, anomalies, and malicious activity within client environments.
- Leverage threat intelligence, behavioral analytics, and advanced forensic tools to uncover hidden threats.
- Investigate indicators of compromise (IOCs) and tactics, techniques, and procedures (TTPs) used by threat actors.
- Collaborate with incident response teams to analyze and contain threats.
- Provide in-depth analysis of malware, phishing campaigns, and advanced persistent threats (APTs).
- Recommend remediation actions to mitigate risks and prevent future occurrences.
- Enhance existing detection systems by fine-tuning security tools, such as SIEM, EDR, and IDS/IPS.
- Develop and implement custom scripts, automation workflows, and tools for threat detection and analysis.
- Work closely with clients’ IT and security teams to improve overall security posture.
- Provide detailed reports and presentations on threat hunting findings, trends, and actionable recommendations to internal and client upper management.
- Contribute to threat intelligence sharing and collaboration across the organization and with external partners.
- Stay updated on emerging threats, attack vectors, and technologies in the cybersecurity landscape.
- Develop and document new threat-hunting methodologies and share knowledge with the team.
- Performs other duties as assigned
Required Skills/Abilities:
- Excellent analytical and effective problem-solving skills.
- Excellent verbal and written communication skills
- Ability to think critically and creatively to solve complex security challenge
- Excellent interpersonal skills
- Self-motivated and detail oriented with a passion for cybersecurity
- Strong teamwork and collaboration skills
- Bachelor’s degree in cybersecurity, computer science or related field or equivalent work experience.
- 5 years of experience in cybersecurity, with a focus on threat hunting, incident response, or threat intelligence.
- Strong understanding of the cyber kill chain, MITRE ATT&CK framework, and TTPs of advanced threat actors.
- Proficiency in using security tools such as SIEM, EDR, and threat intelligence platforms.
- Experience with scripting and automation using languages like Python, PowerShell, or Bash.
- Knowledge of network protocols, system logs, and endpoint security.
- Certifications such as GIAC Cyber Threat Intelligence (GCTI), Certified Threat Hunting Professional (CTHP), or similar are a plus.