Maveris

Maveris is an IT and cybersecurity services company committed to helping organizations create secure digital solutions to accelerate their mission. We are Veteran-owned and proud to serve customers across the Federal Government and private sector. We have an opening for a full-time, permanent Cyber Security Defense Analyst to join our talented, dynamic team in support of the Department of Veterans Affairs customer.Veterans are encouraged to apply. The Cyber Security Threat Hunter will be part of a team that creates hypothesis driven investigations to search out Advanced Persistent Threats and Focused Operators. The individual will need to possess the ability to work well both individually and as part of a team with a shared mission.Key Responsibilities:<ul> <li>Provide proactive Advanced Persistent Threat (APT) and Focused Operator (FO) hunting, incident response support, and advanced analytic capabilities</li> <li>Profile and track APT/FO actors that pose a threat in coordination with threat intelligence support teams</li> <li>Review and analyze log files from various sources such as SIEM, packet captures, and host logs to report any unusual or suspect activities</li> <li>Develop and execute custom scripts to identify host-based indicators of compromise</li> <li>Provide targeted attack detection and analysis, including the development of custom signatures and log queries and analytics for the identification of targeted attacks</li> <li>Determine scope of intrusion identifying the initial point of access or source</li> <li>Recommend remediation activities to secure the source or initial point of access of intrusion</li> <li>Communicate effectively to all customers and stakeholders</li> <li>Provide executive level cyber security strategic recommendations along with security engineering recommendations and custom solutions to counter adversarial activity</li> <li>Provide technical summary of findings in accordance with established reporting procedures</li> <li>Provide identification of obfuscation techniques</li> <li>Knowledge of and ability to apply cybersecurity and privacy principles to organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation)</li> <li>Knowledge of and ability to apply techniques for detecting host and network-based intrusions using intrusion detection technologies</li> <li>Knowledge of and ability to utilize cyber defense and vulnerability assessment tools</li> <li>Knowledge of vulnerability information dissemination sources (e.g., alerts, advisories, errata, and bulletins)</li> <li>Knowledge of what constitutes a network attack and a network attack’s relationship to both threats and vulnerabilities</li> <li>Knowledge of Insider Threat investigations, reporting, investigative tools and laws/regulations</li> <li>Knowledge of adversarial tactics, techniques, and procedures</li> <li>Knowledge of the common attack vectors on the network layer</li> <li>Knowledge of different classes of attacks (e.g., passive, active, insider, close-in, distribution attacks)</li> <li>Knowledge of cyber attackers (e.g., script kiddies, insider threat, non-nation state sponsored, and nation sponsored)</li> <li>Knowledge of cyber attack stages (e.g., reconnaissance, scanning, enumeration, gaining access, escalation of privileges, maintaining access, network exploitation, covering tracks)</li> <li>Skilled in using security event correlation tools</li> <li>Knowledge of and ability to utilize malware analysis concepts and methodologies</li> </ul>Requirements<ul> <li>Experience with common threat hunting solutions including Splunk, packet analysis (e.g., Wireshark), Netflow, QRadar or other SIEMs, etc.</li> <li>An understanding of the MITRE ATT&amp;CK Framework and Cyber Kill Chain methodologies</li> <li>Experience with threat hunting advanced persistent threats</li> <li>In depth understanding of NIST SP 800-61, US CERT, and Office of Management and Budget (OMB) standards</li> <li>Scripting experience, such as Python, PowerShell, etc. is a plus</li> <li>Strong time management skills with attention to detail</li> <li>Strong critical thinking skills</li> <li>Strong interpersonal and collaborative skills, with the ability to work in a team environment</li> <li>Ability to communicate effectively to both technical and non-technical audiences</li> <li>Skilled in developing and deploying signatures</li> <li>Skilled in detecting host and network-based intrusions via intrusion detection technologies</li> <li>Skilled in determining how a security system should work (including its resilience and dependability capabilities) and how changes in conditions, operations, or the environment will affect these outcomes</li> <li>Skilled in collecting data from a variety of cyber defense resources</li> <li>Skilled in recognizing and categorizing types of vulnerabilities and associated attacks</li> <li>Skilled in reading and interpreting signatures (e.g., snort)</li> <li>Skilled in assessing security controls based on cybersecurity principles and tenets. (e.g., CIS CSC, NIST SP 800-53, Cybersecurity Framework, etc.)</li> <li>Skilled in performing packet-level analysis</li> <li>Able to develop content for cyber defense tools</li> <li>Characterize and analyze network traffic to identify anomalous activity and potential threats to network resources</li> <li>Coordinate with enterprise-wide cyber defense staff to validate network alerts</li> <li>Perform cyber defense trend analysis and reporting</li> <li>Perform event correlation using information gathered from a variety of sources within the enterprise to gain situational awareness and determine the effectiveness of an observed attack</li> <li>Receive and analyze network alerts from various sources within the enterprise and determine possible causes of such alerts.</li> <li>Ability to determine tactics, techniques, and procedures (TTPs) for intrusion sets</li> <li>Ability to conduct research, analysis, and correlation across a wide variety of all source data sets (indications and warnings)</li> <li>Ability to reconstruct a malicious attack or activity based off network traffic</li> <li>Assist in the construction of signatures which can be implemented on cyber defense network tools in response to new or observed threats within the network environment or enclave.</li> <li>Notify designated managers, cyber incident responders, and cybersecurity service provider team members of suspected cyber incidents and articulate the event's history, status, and potential impact for further action in accordance with the organization's cyber incident response plan.</li> <li>Analyze and report organizational security posture trends.</li> <li>Analyze and report system security posture trends</li> <li>Monitor external data sources (e.g., cyber defense vendor sites, Computer Emergency Response Teams, Security Focus) to maintain currency of cyber defense threat condition and determine which security issues may have an impact on the enterprise</li> <li>Provides cybersecurity recommendations to leadership based on significant threats and vulnerabilities</li> <li>Participation in rotational on-call support</li> </ul><h3>Relevant certifications and training preferred:</h3><ul> <li>GIAC Certified Incident Handler (GCIH)</li> <li>GIAC Certified Forensics Examiner (GCFE)</li> <li>GIAC Certified Intrusion Analyst (GCIA)</li> <li>GIAC Certified Forensic Analyst (GCFA)</li> <li>GIAC Certified Network Forensic Analyst (GNFA)</li> <li>GIAC Cyber Threat Intelligence (GCTI)</li> <li>GIAC Reverse Engineering Malware (GREM)</li> </ul>BenefitsMaveris attracts and retains talent of the highest caliber by offering opportunities to work in exciting and challenging environments surrounded by bright minds. Our employees are our most prized asset and are rewarded with highly competitive compensation and a top-tier benefits package, including:<ul> <li>401(k) with company match</li> <li>Dental Insurance</li> <li>Health Insurance</li> <li>Vision Insurance</li> <li>Life Insurance</li> <li>Paid Time Off</li> </ul><h3>About Maveris</h3>Maveris offers exceptional, mission-focused, solutions to organizations facing highly complex IT, digital, and cybersecurity challenges. Our success is achieved by maintaining an environment of trust where people are encouraged to reach their fullest potential. Every candidate that applies to Maveris brings something unique to the table, and because our team is diverse, we consistently meet our goals and exceed client expectations. If you are a highly-motivated person with a willingness to learn, we invite you to apply today to join our team!To learn more about employee benefits visit <a href="http://www.maveris.com/" rel="noopener noreferrer nofollow ugc" target="_blank">www.maveris.com</a>.For company updates and the latest job postings check us out on <a href="https://www.linkedin.com/company/maveris" rel="noopener noreferrer nofollow ugc" target="_blank">LinkedIn</a>.If you'd like to read about some of our research and projects head over to <a href="https://medium.com/maverislabs" rel="noopener noreferrer nofollow ugc" target="_blank">Maveris Labs</a>.Want a more behind the scenes view? Check out our blog <a href="https://maveris.com/insights/" rel="noopener noreferrer nofollow ugc" target="_blank">Maveris Insights</a> to learn more about the team behind the solutions.

Hines

Cyber Security Threat Hunter

The Insider Threat Analyst (Security Operations) will be part of a team that monitors for and investigates insider threat activity in a large federal agency. Discovered threat activity will be captured and documented in reports sent to cross organization leadership. The analyst will develop custom searches using a wide array of network and host-based security toolsets (Splunk, QRadar, Microsoft Defender etc.). The individual will need to possess the ability to work well both individually and as part of a team with a shared mission.Veterans encouraged to apply.<h3>Key Responsibilities</h3><ul> <li>Review and analyze log files from various sources such as SIEM, EDR, packet captures, and host logs to report any unusual or suspect activities </li> <li>Provide targeted detection and analysis, including the development of custom signatures and log queries and analytics for the identification of insider threats</li> <li>Monitor User Activity Monitoring (UAM) and User Entity Behavioral Analytics (UEBA) tools</li> <li>Determine scope of intrusion and recommend remediation activities to secure the source or initial point of access of intrusion</li> <li>Characterize and analyze network traffic to identify anomalous activity and potential threats to network resources</li> <li>Coordinate with enterprise-wide cyber defense staff to validate network alerts</li> <li>Perform event correlation using information gathered from a variety of sources within the enterprise to gain situational awareness and determine the effectiveness of an observed threat</li> <li>Conduct research, analysis, and correlation across a wide variety of all source data sets (indications and warnings)</li> <li>Monitor external data sources (e.g., cyber defense vendor sites, Computer Emergency Response Teams, Security Focus) to maintain currency of cyber defense threat condition and determine which security issues may have an impact on the enterprise</li> <li>Provide recommendations and custom solutions to counter insider threat activity</li> <li>Provide technical summary of findings in accordance with established reporting procedures</li> <li>Identify insider threat use-cases for automation using a security orchestration and automation product</li> </ul>Requirements<ul> <li>Must possess a minimum of three years experience performing in Insider Threat analysis</li> <li>Candidate MUST be proficient with Splunk Query Language </li> <li>Experience with common threat hunting solutions including Splunk, packet analysis (e.g., Wireshark), NetFlow, QRadar or other SIEMs, etc.</li> <li>An understanding of the MITRE ATT&amp;CK Framework and Cyber Kill Chain methodologies</li> <li>Understanding of NIST SP 800-61, US CERT, and Office of Management and Budget (OMB) standards</li> <li>Knowledge of and ability to apply cybersecurity and privacy principles to organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation)</li> <li>Knowledge of and ability to apply techniques for detecting host and network-based intrusions using intrusion detection technologies</li> <li>Experience using ticketing systems to include ServiceNow (SNOW) and BMC Remedy</li> <li>Knowledge of cyber attackers (e.g., script kiddies, insider threat, non-nation state sponsored, and nation sponsored)</li> <li>Scripting experience, such as Python, PowerShell, etc. is a plus</li> <li>Strong time management skills with attention to detail</li> <li>Strong critical thinking skills</li> <li>Strong interpersonal and collaborative skills, with the ability to work in a team environment</li> <li>Ability to develop content for cyber defense tools</li> <li>Ability to write insider threat reports to both technical and non-technical audiences; reports are evaluated for quality and clarity</li> </ul>Relevant certifications and training are a plus:<ul> <li>GIAC Certified Incident Handler (GCIH)</li> <li>GIAC Certified Forensics Examiner (GCFE)</li> <li>GIAC Certified Intrusion Analyst (GCIA)</li> <li>GIAC Certified Forensic Analyst (GCFA)</li> <li>GIAC Certified Network Forensic Analyst (GNFA)</li> <li>GIAC Cyber Threat Intelligence (GCTI)</li> <li>GIAC Reverse Engineering Malware (GREM)</li> <li>Certified Information Systems Security Specialist (CISSP)</li> <li>Splunk Core Certified Power User</li> </ul>BenefitsMaveris attracts and retains talent of the highest caliber by offering opportunities to work in exciting and challenging environments surrounded by bright minds. Our employees are our most prized asset and are rewarded with highly competitive compensation and a top-tier benefits package, including:<ul> <li>401(k) with company contribution</li> <li>Dental Insurance</li> <li>Health Insurance</li> <li>Vision Insurance</li> <li>Life Insurance</li> <li>Paid Time Off</li> </ul><h3>About Maveris</h3>Maveris offers exceptional, mission-focused solutions to organizations facing highly complex IT, digital, and cyber security challenges. Our success is achieved by maintaining an environment of trust where people are encouraged to reach their fullest potential. Every candidate that applies to Maveris brings something unique to the table, and because our team is diverse, we consistently meet our goals and exceed client expectations. If you are a highly-motivated person with a willingness to learn, we invite you to apply today to join our team!To learn more about employee benefits visit <a href="http://www.maveris.com/" rel="noopener noreferrer nofollow ugc" target="_blank">www.maveris.com</a>.For company updates and the latest job postings check us out on <a href="https://www.linkedin.com/company/maveris" rel="noopener noreferrer nofollow ugc" target="_blank">LinkedIn</a>.If you'd like to read about some of our research and projects head over to <a href="https://medium.com/maverislabs" rel="noopener noreferrer nofollow ugc" target="_blank">Maveris Labs</a>.Want a more behind the scenes view? Check out our blog <a href="https://maveris.com/insights/" rel="noopener noreferrer nofollow ugc" target="_blank">Maveris Insights</a> to learn more about the team behind the solutions.We are an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity or expression, pregnancy, age, national origin, disability status, genetic information, protected veteran status, or any other characteristic protected by law.

Martinsburg

Insider Threat Analyst (Security Operations)

EMW, Inc.

Deadline Date: Tuesday 26 July 2022 Requirement: Cyber Security JIRA Developer 2 Location: Mons, BE Full time on-site: Yes NATO Grade: A/114 Total Scope of the request (hours): 700 Required Start Date: 22 August 2022 End Contract Date: 31 December 2022 Required Security Clearance: NATO SECRETDuties and Role: As an Atlassian Jira Developer, the incumbent develops and maintains Jira Worflows related to Cyber Security, and specifically Vulnerability Management workflows, for the NATO Cyber Security Centre. The role will involve coordinating with the team responsible for the maintenance and operation of the Jira Software platform available in NCSC, in addition to the following main responsibilities: <ul> <li>Develop a Vulnerability Management workflow, hosted on the NCSC Jira Software platform.</li> <li>Create associated documentation (Design Document, Installation Manual, User Manual, Administration Manual).</li> <li>Execute test cases</li> <li>Assist the NCSC teams for the deployment and activation of the Workflow.</li> <li>Deliver all source codes developed during the project.</li> <li>Link the workflow with other existing Jira Workflow and external data sources when appropriate.</li> <li>Train and mentor team members on technical subjects related to the developed workflows, specifically on how to use the developed workflows and how to modify/maintain them over time.</li> <li>Perform other duties as requested by management.</li> </ul>RequirementsSkill, Knowledge &amp; Experience: <ul> <li>The candidate must have a NATO SECRET security clearance </li> <li>A university degree from a nationally recognised/certified University in a technical subject with substantial Information Technology (IT) content and 2 years of specific experience.</li> <li>Exceptionally, the lack of a university degree may be compensated by the demonstration of a candidate's particular abilities or experience that is/are of interest to NCI Agency; that is, at least 5 years extensive and progressive expertise in the duties related to the function of the post.</li> </ul>Mandatory Expert level in the following areas: <ul> <li>Development on the Atlassian Jira Platform.</li> <li>Administration of the Atlassian Jira Platform.</li> <li>Experience in Vulnerability Assessment tools and Vulnerability Management principles.</li> <li>Comprehensive knowledge of the principles of computer and communications security, networking, and the vulnerabilities of modern operating systems and applications.</li> <li>High level of experience in the development of automation capabilities via both Jira tools and scripting languages.</li> </ul>Desirable <ul> <li>Industry leading certification in the area of Cybersecurity, such as GCIA, GNFA, GCIH.</li> <li>A solid understanding of Information Security Practices relating to the Confidentiality, Integrity and Availability of information (CIA triad).</li> <li>Ability to analyse attack vectors against a particular system to determine attack surface.</li> <li>Knowledge of Tenable Nessus tools.</li> <li>Hands on experience on monitoring IT services.</li> </ul>

Mons

SC2022-002235 Cyber Security JIRA Developer 2 (NS) - TUE 26 Jul

ColorTokens

<h3>
Location: Hyderabad,Telangana,India 
</h3>
The Threat Hunter will be responsible for identifying advanced persistent threats using automated models, develop new models based on latest attack patterns, analysis of anomalous log data, provide expert analytic investigative support for complex security incidents.  The focus of the Threat Hunter is to detect advanced attacks, perform investigation on suspicious events detected and provide recommendation and assistance to customer for resolving the incident.<h3>Experience : 2- 5  yrs </h3>Rotational Shifts - 24*7 Responsibility <ul><li>Hunt for advanced threats using analytical models and tools</li><li>Provide analytic investigative support for identified security incidents.</li><li>Engage with customer to provide remediation support for identified incidents</li><li>Create and maintain run books for hunting and investigating key threats</li><li>Continuously improve processes for enhancing threat detection</li><li>Work with data scientists to develop new analytical model for hunting</li></ul>Skills <ul><li>Strong understanding of the TCP/IP networking stack</li><li>Knowledge and understanding of attack methodologies and counter measures</li><li>Working Knowledge of security tools like IPS, WAF, Firewall</li><li>Understanding of Enterprise IT infrastructure – Operating system, Active Directory, Proxy, Netflow, Packet capture, DNS, Email </li><li>Understanding of MITRE Attack framework</li></ul>Education:<ul><li>B.Tech or Cyber Security specialization</li><li>Relevant Technical Security Certifications (SANS GIAC/GCFA/GNFA/OSCP)</li></ul>Experience:<ol><li>2-5 years of experience in Threat Hunting/Threat Analysis, SOC Monitoring , Incident Response, Malware Analysis or IDS/IPS analysis</li><li>Experience in Investigation, Playbook creation and APT</li><li>Experience of SIEM based monitoring using one or more of Splunk/QRadar/Arcsight</li><li>Experience with data hunting using one of ELK/Splunk/AWS</li></ol>Good to have skills: Understanding of endpoint telemetry including CarbonBlack/Endgame/similar
<a href="https://colortokens.recruiterbox.com/jobs/fk0qp2k/?apply=true" rel="noopener noreferrer nofollow ugc" target="_blank">Apply to this job</a>

Hyderabad

Threat Hunter

ARSIEM

About ARSIEM CorporationAt ARSIEM Corporation we are committed to fostering a proven and trusted partnership with our government clients.  We provide support to multiple agencies across the United States Government.  ARSIEM has an experienced workforce of qualified professionals committed to providing the best possible support.As demand increases, ARSIEM continues to provide reliable and cutting-edge technical solutions at the best value to our clients.  That means a career packed with opportunities to grow and the ability to have an impact on every client you work with. ARSIEM is looking for a Cloud Forensics Analyst. This position will support one of our Government clients in Arlington, VA.
<h3>Responsibilities</h3>
<ul>
<li>Characterize and analyze network traffic to identify anomalous activity and potential threats to network resources.</li><li>Coordinate with enterprise-wide cyber defense staff to validate network alerts.</li><li>Document and escalate incidents (including event's history, status, and potential impact for further action) that may cause ongoing and immediate impact to the environment.</li><li>Perform cyber defense trend analysis and reporting.</li><li>Perform event correlation using information gathered from a variety of sources within the enterprise to gain situational awareness and determine the effectiveness of an observed attack.</li><li>Provide daily summary reports of network events and activities relevant to cyber defense practices.</li><li>Receive and analyze network alerts from various sources within the enterprise and determine possible causes of alerts.</li><li>Provide timely detection, identification, and alerting of possible attacks/intrusions, anomalous activities, and misuse activities and distinguish these incidents and events from benign activities.</li><li>Use cyber defense tools for continual monitoring and analysis of system activity to identify malicious activity.</li><li>Analyze identified malicious activity to determine weaknesses exploited, exploitation methods, effects on system, and information.</li><li>Identify and analyze anomalies in network traffic using metadata.</li><li>Validate intrusion detection system (IDS) alerts against network traffic using packet analysis tools.</li><li>Identify applications and operating systems of a network device based on network traffic.</li><li>Reconstruct a malicious attack or activity from network traffic.</li><li>Identify network mapping and operating system (OS) fingerprinting activities.</li><li>Assist in the construction of signatures that can be implemented on cyber defense network tools in response to new or observed threats within the network environment or enclave </li></ul>
<h3>Minimum Qualifications</h3>
<ul>
<li>BS Computer Science, Cyber Security, Computer Engineering, or related degree or HS Diploma &amp; 10 years of network investigations experience. </li><li>Ability to obtain Department of Homeland Security (DHS) Entry on Duty (EOD) Suitability</li><li>8+ years of relevant experience in cyber defense analysis using leading-edge technologies and industry-standard cyber defense tools</li><li>Experience successfully developing and deploying signatures</li><li>Experience detecting host and network-based intrusions via intrusion detection technologies (e.g., Snort)</li><li>Experience implementing incident handling methodologies</li><li>Experience implementing protocol analyzers</li><li>Experience collecting data from a variety of cyber defense resources</li><li>Experience reading and interpreting signatures (e.g. snort)</li><li>Experience performing packet-level analysis</li><li>Experience conducting trend analysis Desired Skills</li><li>Python programming experience</li><li>Strong math and science background</li><li>Experience with Carnegie Mellon SiLK tool suite </li></ul>
<h3>Preferred Qualifications</h3>
<ul>
<li>One or more: GNFA, GCIH, GCIA, GSEC, CASP+, CySA+, PaLMS, FedVTE • GSEC (SANS401), Arcsight (or other SEIM solution), Network+, Security+</li></ul>Clearance Requirement: This position requires an Active TS/SCI clearance and the ability to obtain Department of Homeland Security (DHS) Entry on Duty (EOD) Suitability. Candidate Referral: Do you know someone who would be GREAT at this role? If you do, ARSIEM has a way for you to earn a bonus through our referral program for persons presenting NEW (not in our resume database) candidates who are successfully placed on one of our projects. The bonus for this position is 5,000,  and the referrer is eligible to receive the sum for any applicant we place within 12 months of referral. The bonus is paid after the referred employee reaches 6 months of employment.ARSIEM is proud to be an Equal Opportunity and Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status, age, or any other federally protected class.

Arlington

Cloud Forensics Analyst

Apply to GNFA Cyber Security Jobs in companies remotely and near you. New GNFA Cyber Security Jobs added daily.

Job Position and Company	Location	Tags	Posted
Cyber Security Threat Hunter at Maveris	Full Time Forensic Analyst Incident Response GCFA
Insider Threat Analyst (Security Operations) at Maveris	Remote Full Time Forensic Analyst GCFA
SC2022-002235 Cyber Security JIRA Developer 2 (NS) - TUE 26 Jul at EMW, Inc.	Automation CIA Clearance GCIA GCIH
Threat Hunter at ColorTokens	Active Directory APT Arcsight AWS DNS
Cloud Forensics Analyst at ARSIEM	Arcsight CASP Clearance Cloud Cyber Defense

GNFA Cyber Security Jobs

0 GNFA Cyber Security Jobs. Page 1 of 1

5 closed gnfa cyber security jobs:

Subscribe to the weekly
Cyber Security Jobs Newsletter

GNFA Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

GNFA Cyber Security Jobs

0 GNFA Cyber Security Jobs. Page 1 of 1

5 closed gnfa cyber security jobs:

Subscribe to the weekly Cyber Security Jobs Newsletter

GNFA Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Subscribe to the weekly
Cyber Security Jobs Newsletter