- Company Name
- Synergy ECP
- Job Title
- Cyber Hunt Analyst
- Job Description
-
**Job Title**
Cyber Hunt Analyst
**Role Summary**
Analyze network and platform behavior to detect, investigate, and report anomalous activities and emerging threats. Employ threat intelligence, analytics tools, and incident response techniques to protect enterprise assets and inform tactical, technical, and strategic countermeasures.
**Expectations**
- U.S. citizenship and TS/SCI security clearance required.
- Ability to work under high-pressure, real-time operational conditions.
- Strong analytical mindset for independent investigation and root‑cause determination.
**Key Responsibilities**
- Monitor and analyze anomalous network traffic across multi‑domain environments (netflow, syslog, IDS/IPS logs, HIDS/NIDS, firewalls, antivirus).
- Conduct multi‑source threat assessments: examine host behaviors, network traffic, and emerging malicious attacks.
- Integrate cyber‑threat intelligence, produce hunt analytics, and produce actionable reports for the Reporting Team Lead.
- Identify and document data gaps that impact mission posture; recommend enhancements to data feeds and sensor coverage.
- Develop, document, and coordinate signature, rule, and sensor tasking across IDS, firewalls, and other detection systems.
- Support incident response: collect forensic evidence, isolate threats, and recommend mitigation actions.
- Conduct open‑source research on adversary capabilities, exploits, vulnerabilities, and mitigation best practices.
- Participate in red‑team and penetration testing activities, including malicious code analysis.
- Collaborate with stakeholders to validate findings, provide technical briefings, and align recommendations with organizational strategy.
**Required Skills**
- Network analytics & anomaly detection (IPv4, TCP/IP, RFCs, low‑level protocols).
- Threat intelligence integration and advanced hunting techniques.
- Experience with SIEM, log analysis, and scripting (PowerShell, Python, Java).
- Familiarity with Windows & Linux system administration, firewall/IDS configuration, and network architecture.
- Incident response knowledge, evidence collection, and forensic tools (EnCase, open‑source alternatives).
- Red‑team / penetration testing experience; malware reverse engineering.
- Cloud analytics (Hadoop, PIG scripts) and data manipulation skills.
- Strong communication, documentation, and prioritization abilities.
**Required Education & Certifications**
- Bachelor’s degree in Computer Science, Information Security, or related field (or equivalent experience).
- Security certifications such as CISSP, CEH, CISM, or relevant threat‑intelligence credentials preferred.