Job description

RESPONSIBILITIES: • Actively defend the organization’s information systems by identifying, analyzing, and mitigating advanced cyber threats. • Perform in-depth threat hunting, malware analysis, and forensic investigations to detect and eradicate adversaries from the environment. • Lead vulnerability assessments and penetration testing efforts to uncover and remediate security gaps across on-premises and cloud infrastructures. • Monitor and analyze security events from SIEM, EDR, IDS/IPS, and other tools to respond to incidents in real-time with precision. • Develop and tune detection rules, alerts, and response playbooks to improve the efficiency and effectiveness of security operations. • Perform hands-on configuration and hardening of network infrastructure, endpoints, servers, and cloud environments to enforce security best practices. • Research emerging threats, exploits, and vulnerabilities, and proactively implement defensive measures to reduce organizational risk. • Serve as a subject matter expert in technical security topics and collaborate with infrastructure, application, and development teams to ensure secure system design and operation. EDUCATION REQUIREMENT(S): • Bachelor’s or Master’s degree in Computer Science, Information Security, Cybersecurity, or a related field, or equivalent experience. Industry certifications such as OSCP, GIAC (GCIH, GCFA), CEH, or equivalent are preferred. EXPERIENCE REQUIREMENT(S): • 4–6 years of hands-on experience in cybersecurity operations, incident response, penetration testing, or threat hunting. • Proficient in the use of security tools and technologies including SIEM, EDR, vulnerability scanners, and forensic toolkits. • Strong technical expertise in networking (TCP/IP, DNS, VPNs), operating systems (Windows/Linux), scripting (Python, PowerShell, Bash), and cloud platforms (AWS, Azure). • Experience analyzing and reverse-engineering malware, exploits, and attack patterns using frameworks like MITRE ATT&CK. • Demonstrated ability to develop custom scripts, automation, or tools to streamline security workflows and improve threat detection. • Excellent troubleshooting and analytical skills with the ability to solve complex technical problems under pressure. • Strong written and verbal communication skills for documenting findings and explaining technical concepts clearly. • Passion for continuous learning and staying ahead of the evolving cybersecurity threat landscape. Excellent leadership and team management skills, with the ability to motivate and develop staff. ADDITIONAL INFORMATION: Due to International Traffic in Arms Regulations (ITAR) and Export Administration Regulations (EAR) requirements, all candidates must be presently classified as a “US Person" which includes: a United States citizen; a permanent legal resident (green card holder); or a protected individual (refugee/asylum status).

Requirements