Position: Threat Hunter
Company: ITernal Group
Experience required: 5y
Category: Other
English level: upper
Published: 2023-08-01T00:00:00+03:00

We are looking Threat Hunter

**Requirements:**
• Proven experience of 5+ years in Cyber Threat Hunter or Incident Response, including high skills in forensics and investigation of network, endpoint and cloud logs
• Deep and proven knowledge and understanding of attacks and compromise footprints
• Deep and proven knowledge of baseline operating system internals, network communications and user behavior
• Critical thinking, problem-solving skills and innovative way of thinking
• Action-oriented and have a proactive approach to solving issues
• Excellent written and verbal communication skills
• Excellent organization, time management, and attention to detail
• Ability to work with security applications such as data lake, SIEM and EDR
• Ability to use forensic tools and analysis methods to detail nearly every malicious action
• Ability to conduct endpoint security and Windows artifact analysis: Registry hives, Event Log files, File system analysis, etc.
• Ability to conduct network security and understand TCP/IP component layers and distinguish normal from abnormal network traffic
• Ability to conduct cloud security (Cloud Storage File and Metadata Examinations)
• Ability to do malware analysis using sandbox to identify and analyze suspicious artifacts in sandbox reports
• Ability to continuously learn new technology and stay updated on cyber threats

**Responsibilities:** 
• Strong knowledge of Threat Hunting
• Must have a deep understanding of attacker methodologies, computer intrusion activities, incident response techniques, tools, and procedures
• Thorough knowledge of digital forensics methodology as well as security architecture, system administration, and networking (including TCP/IP, DNS, HTTP, SMTP)
• Experience working with large and complex data sets from various sources, including network, endpoint, and cloud environments
• Knowledge of operating systems essentials including Linux/Unix and Windows
• Strong knowledge of Python programming and preferably experience with Jupyter Notebooks
• Knowledge of data science techniques, including statistical modeling, machine learning algorithms, and predictive analytics
• Excellent analytical and problem-solving skills
• Strong communication and collaboration skills with the ability to work effectively in a team environment
• Self-starter with the ability to work independently and prioritize tasks
• Experience with cloud-based data storage and analytics platforms is a plus
• Experience with security assessment tools such as NMAP, Netcat, Nessus, and Metasploit is a plus.
• Red teaming knowledge preferred but not essential
• Familiar with Ethical hacking
• Familiar with Threat intelligence

**Must have:** 
• Proactively drive hunting and analysis against the available dataset to look for indicators of security breaches
• Leverage internal and external resources to research threats, vulnerabilities, and intelligence on various attackers and attack techniques, to form hunting workflows and mitigation steps
• Design and implement data mining techniques to extract meaningful insights from large data sets
• Collaborate with the incident response team to develop EDR-based detection and response workflows
• Perform analysis on data sets from various sources including, network, endpoint, and cloud environments
• Develop and maintain an understanding of the latest cybersecurity technologies, trends and threats
• Participate in the development of reports and dashboards that provide insights into the cybersecurity posture of the client
• Collaborate with cross-functional teams to develop and implement new tools and techniques to enhance cybersecurity analytics

**Certifications which may be valuable:**
• Cisco Certified Network Associate (CCNA)
• Certified Ethical Hacker (CEH)
• Certified Computer Examiner (CCE)
• GIAC Certified Forensic Examiner (GCFE)
• Certified Computer Forensics Examiner (CCFE)

**We offer:**
• Friendly, professional staff and warm atmosphere;
• The environment where you can implement your ideas;
• Plans for growth and performance review;
• Flexible schedule and opportunities to work remotely (8 hours workday);
• Paid 18 days of vacation and up to 10 sick leaves annually;
• Medical insurance after the trial period;
• English courses;
• Participation in educational activities and thematic conferences;
• Attending professional conferences, summits, workshops, and seminars (70% of the cost offset by the company);
• Team parties and corporate events.