Назад
Company hidden
6 дней назад

Cyber Threat Analyst (Cybersecurity)

115 000 - 150 000$
Формат работы
onsite
Тип работы
fulltime
Грейд
middle
Английский
b2
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Cyber Threat Analyst (Cybersecurity): Analyzing multi-source intelligence, telemetry, and forensic data to defend DoD, Pacific Command, and mission partner networks with an accent on adversary characterization, threat hunting, and cloud security. Focus on mapping campaigns to MITRE ATT&CK, reconstructing intrusions across classified and multi-cloud environments, and developing actionable detection use cases for enterprise SIEM platforms.

Location: Full-time onsite role at Ford Island, HI; telework is not permitted. Relocation expenses may be eligible for reimbursement of up to $10,000. Travel is required approximately 10% of the time.

Salary: $115,000–$150,000 annually, depending on experience and position level. A $10,000 sign-on bonus may be available subject to a 12-month commitment.

Company

hirify.global provides security compliance, program governance, consulting, and customized technology solutions for public sector clients.

What you will do

  • Analyze sensor feeds, NetFlow, IDS/IPS logs, proxy and DNS data, firewall telemetry, endpoint logs, and forensic evidence to identify adversary activity.
  • Track advanced persistent threat campaigns, characterize tactics and techniques using MITRE ATT&CK and Cyber Kill Chain frameworks, and identify living-off-the-land behavior.
  • Produce threat warnings, tippers, intelligence summaries, battlefield cyber threat assessments, and operational reports for DoD and mission partners.
  • Develop threat hypotheses and conduct structured threat hunting across enterprise endpoints, on-premises networks, cloud enclaves, and classified environments.
  • Translate threat intelligence into detection use cases, rule logic, and requirements for Splunk, Microsoft Sentinel, Elastic, and JCRS-D.
  • Brief senior military and executive leadership on adversary capabilities, active campaigns, insider threats, and strategic cyber risk.

Requirements

  • Active DoD Top Secret clearance with SCI eligibility is required; Secret clearance may be accepted with government approval.
  • DoD 8140.03 / DCWF Work Role Code 531 or equivalent certification or degree is required before the start date.
  • Accepted certifications include CompTIA CySA+, GCTI, CEH, CFR, GCIA, GCIH, CND, CISSP, CASP+ CE, and GCFA.
  • Bachelor’s degree with at least 2 years of relevant experience, an associate degree with at least 4 years, or 6+ years of relevant cyber intelligence or military experience in lieu of a degree.
  • Experience with adversary TTP analysis, structured threat intelligence products, packet captures, NetFlow, security logs, and enterprise SIEM querying.
  • Ability to work standard operational shifts, with occasional after-hours support during critical incidents.

Nice to have

  • Experience supporting USPACOM, DISA Pacific, DJOC, Joint Cyber Centers, or DoD defensive cyber operations units.
  • Structured threat hunting across cloud and enterprise networks.
  • Malware triage, sandboxing, de-obfuscation, hashing, and command-and-control extraction experience.
  • Familiarity with AI prompting for automation and OSINT data collection.
  • Experience with DoD incident response frameworks and reporting platforms such as Rally and DISS.

Culture & Benefits

  • Medical, dental, and vision coverage options.
  • Paid time off, paid holidays, and paid parental leave.
  • Pre-tax and Roth retirement savings accounts.
  • Life insurance, short- and long-term disability coverage, and employee assistance programs.
  • Tuition and training reimbursement, flexible spending accounts, and dependent care savings accounts.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →