Cyber Defense Threat Hunting Analyst

Resource Management Concepts, Inc. (RMC) provides high-quality, professional services to government and commercial sectors. Our mission is to deliver exceptional management and technology solutions supporting the protection and preservation of the people and environment of the United States of America.

We are seeking a highly skilled Cyber Defense Threat Hunting Analyst to join our Cyber Defense Team. In this critical role, you will execute defensive cyber counter-infiltration operations to detect and mitigate Advanced Persistent Threats (APT) within the DoD customer's enterprise network. This position involves leveraging cutting-edge tools and methodologies to protect mission-critical systems while maintaining compliance with DoD cybersecurity requirements.

This is a unique opportunity to work on advanced defensive cyber operations, contributing directly to national security by protecting enterprise networks from sophisticated threats. You will be part of an elite team, leveraging state-of-the-art tools and methodologies to stay ahead of adversaries.

Key Responsibilities

• Threat Hunting and Mitigation: Conduct proactive threat hunting operations, identifying and neutralizing Advanced Persistent Threats (APTs) across enterprise systems.
• Detection and Analysis: Assess servers, hosts, and network devices to detect adversary activity, leveraging tools such as the MITRE ATT&CK Framework, Active Directory, and PowerShell.
• Incident Response: Support Red Team (penetration testing) exercises to demonstrate and enhance detection and mitigation capabilities.
• Research and Development: Analyze and identify new APT Tactics, Techniques, and Procedures (TTPs) to continuously improve the Hunt Team's effectiveness.
• Capability Improvement: Create new detection use cases and identify gaps in detection capability, documenting findings and submitting ITSM trouble tickets as needed.
• Training and Documentation:
• Update Cyber Hunt tactics, techniques, procedures, and training materials annually.
• Prepare and deliver at least two training sessions annually, achieving a minimum 90% satisfaction rating from attendees.
• Compliance Support: Assist in maintaining the Government's CSSP accreditation by providing technical documentation and adhering to DOD 8530.01-M standards.