Cyber Threat Hunter - (STRTS8014_COMPANY_1.1)

StratasCorp Technologies is hiring a Cyber Threat Hunter to support cybersecurity monitoring, detection, analysis, and response for the Military Sealift Command network environment. The role conducts real-time network and alert analysis, investigates potential threats, and helps maintain and improve security monitoring tools and detection capabilities.

What you'll do:

• Support day-to-day Cyber Security Service Provider (CSSP) intrusion detection and prevention operations
• Conduct tactical, real-time monitoring and analysis of security alerts, network sessions, statistical data, and full packet captures to identify suspicious activity and potential cybersecurity threats
• Operate and monitor intrusion-sensing, network traffic analysis, and packet capture tools to support continuous monitoring of MSC networks
• Monitor SIEM platforms and CSSP security tools to identify anomalous behavior, indicators of compromise, and potential security incidents
• Examine and triage security alerts to determine the nature, severity, scope, and potential impact of identified threats
• Identify patterns of malicious activity and support proactive threat-hunting efforts to detect threats that may evade traditional security controls
• Analyze network traffic, packet captures, session data, and security logs to investigate suspicious activity and potential intrusions
• Utilize tools such as Wireshark, WinDump, and TCPDump to capture, inspect, and analyze network communications
• Correlate data from multiple security monitoring sources to identify attack patterns, establish relationships between events, and support incident investigations
• Conduct strategic analysis of Intrusion Detection System/Intrusion Prevention System (IDS/IPS) data to identify emerging threats, recurring security events, and opportunities to improve detection
• Document investigative findings and escalate confirmed or suspected threats in accordance with established security procedures
• Support the identification of threat indicators, attack techniques, and potential vulnerabilities affecting the MSC network environment

What they're looking for:

• High school diploma or equivalent
• Active Secret Clearance
• Foundational knowledge of cybersecurity concepts, network security, intrusion detection, and intrusion prevention
• Ability to analyze security alerts, network traffic, and log data to identify suspicious or potentially malicious activity
• Familiarity with network protocols, packet capture analysis, and common cybersecurity monitoring techniques
• Strong analytical, troubleshooting, and problem-solving skills
• Attention to detail and the ability to recognize unusual patterns or anomalies in network activity
• Ability to document technical findings clearly and communicate security concerns effectively
• Ability to work collaboratively in a team-oriented, security operations environment
• Experience supporting a Security Operations Center (SOC), Cyber Security Service Provider (CSSP), or similar cybersecurity operations environment
• Experience with IDS/IPS platforms, SIEM tools, and network intrusion monitoring technologies
• Hands-on experience using Wireshark, WinDump, TCPDump, or comparable packet capture and network analysis tools

Benefits:

• Medical, dental, and vision insurance
• FSA & HSA accounts
• Disability and other income protection benefits
• Life insurance
• Paid personal time-off benefits
• Paid holidays
• A 401K Saving Plan with a company matching contribution