Threat Hunt Operator

The Company

Every day, NuHarbor Security improves the cybersecurity of our clients by making it stronger and easier to understand.  Our comprehensive suite of security services, from strategic advising to 24-hour monitoring and management, provide an organizational view of security that is focused on results and recommendations that are valuable for both business and technical leaders.  We’re growing quickly because our clients, and the general market, are looking for these outcomes and for the data it gives them to explain, promote, and justify, their security investment and mission.

The Role

The Threat Hunter role serves as a mid-level technical operator within Cyber Threat Operations team. The Threat Hunt Operator role is critical in proactively searching for indicators of Compromise (IOC’s), Indicators of Attack (IOAs), and actively hunting for threats not yet formally categorized by a Threat Actor. The Operator is expected to collaborate with Detection Engineering teams to refine detection capabilities, identifying emerging threats and developing and implementing detection strategies and methodologies. The Operator also holds the critical role in directly working with Clients to provide feedback, recommendations, and provide remediation guidance as needed.

What you’ll do

• Lives by the NuHarbor corporate values: Help Clients Win, Always Improve, Protect the House.
• Conduct Client directed and proactive investigations to identify cyber threats, advanced persistent threats, and anomalous activity within enterprise networks and endpoints.
• Perform deep-dive analysis of suspected security incidents to determine impact, risk, and response actions.
• With a focus on Client environments and desired outcomes, research new and existing threat actors and associated tactics, techniques, and procedures (TTPs); developing a detailed understanding of their potential impact to the client.
• Conduct time-sensitive analysis during cyber investigations, including active threat hunting and malware analysis.
• Identify and propose automated detections for new and previously unknown threats. Collaborate with NuHarbor internal and external Cyber organizations to mitigate risk by testing, deploying, and developing investigative playbooks.
• Mentor analysts in project execution and tactical upskilling; conduct brown bag lunches to teach specialized skill sets.
• The Operator is expected to operate with urgency, ensuring that they operate effectively, professionally, in a timely manner and in the best interest of NuHarbor Security and our clients.
• Performs threat hunting across all client major service platforms and industry verticals.
• Identifies opportunities for improvements in efficiency, quality, maturity, and automation.
• Takes on additional responsibilities and tasks as assigned by the security operations center (SOC) management team.

Your foundation.  The requirements for this role:

• Bachelor’s Degree and three (3) years of experience. Experience should be in a cybersecurity field and should include relevant industry certifications.
  • In lieu of a degree, two (2) years of experience in a related technology field and relevant industry certifications are required.
  • Two (2) or more years of experience in a threat analyst role.
  • One (1) year of experience with OSINT and threat hunting.
  • One (1) year of experience using Splunk, Sentinel, and or other SIEM technologies.
• Knowledgeable of security concepts and frameworks.
  • MITRE ATT&CK
  • D3F3ND
  • Cyber Kill Chain
  • Diamond Model
  • PEAK Threat Hunting
• Demonstrated understands networking concepts and architecture.
• Experience with the Threat Intelligence tools such as OpenCTI, ThreatConnect, Shodan, AbuseIPDB to collect information about adversary groups and cybercriminals that may target the NuHarbor Security client base.
  • Experience giving security recommendations and leading meetings with clients.
• Relevant industry certification(s) such as Certified Threat Hunter, CYSA+, eCTHP, Sec+.
• Must be a citizen of the United States.

Additional capabilities that will differentiate you for this role:

• Experience performing threat hunting across client account via Splunk, Microsoft Sentinel, or other SIEM
• Experience using Threat Intelligence tools and processes necessary to collect information about adversary groups and cybercriminals that may target the NuHarbor Security client base.
  • Experience drafting threat intelligence portions of bi-weekly and quarterly reports.
• Maintains industry certifications required to support the managed services (MS) Catalog.
  • Security+
  • Network+
  • CeH
  • CYSA

The Rewards

What you can expect:

• The engagement and support of company leadership who recognize the challenge of marketing a complex cybersecurity service in a chaotic market.
• An organization that recognizes and rewards employee commitment and contribution to our customers’ satisfaction and success
• Growth in your career and capabilities as you help to chart a path to improving customer interactivity and service adoption.
• A collaborative and driven working environment in a rapidly growing company and market
• A fun and social working environment where you are encouraged to be your true self.

You can also expect competitive salary and benefits, including paid time to give back in your community and generous PTO.

We are purpose driven. We, as an organization, above anything else protect the house first and then help our customers win.  If this sounds like the kind of organization you’d like to be a part of, we‘d like to hear from you.

AAP/EEO Statement

The Equal Employment Opportunity Policy of NuHarbor Security is to provide a fair and equal employment opportunity for all associates and job applicants regardless of race, color, religion, national origin, gender, sexual orientation, age, marital status or disability. NuHarbor Security hires and promotes individuals solely based on their qualifications for the job to be filled.

NuHarbor Security believes that employees should be provided with a working environment which enables each associate to be productive and to work to the best of his or her ability. We do not condone or tolerate an atmosphere of intimidation or harassment based on race, color, religion, national origin, gender, sexual orientation, age, marital status, or disability.  We expect and require the cooperation of all employees in maintaining a discrimination and harassment-free atmosphere.