Senior Threat Hunter
M9 Solutions is dedicated to providing IT services and solutions to the Federal Government by mobilizing the right people, skills, clearance levels, and technologies to help organizations that desire improved performance and modern, sustainable change. M9 has provided quality IT services and support to more than 30 Federal Agencies and multiple commercial customers nationwide. Our capabilities include IT Talent Solutions, Data Delivery & Analytics, Cyber Security, Cloud Migration, Applications and Infrastructure, Software Development, and Finance & Accounting. M9 Solutions is seeking a Senior Threat Hunter to work remotely in support of a government contract for a client located in Washington, DC. An active Secret clearance is required. Required Skills and Qualifications Active Secret security clearance. Bachelor’s Degree (Bachelor’s Degree may be substituted with additional 4+ years of experience). 5+ years of experience with data hunting/manipulation/presentation. Experience in management or as team leader, managing projects and tasks against tight deadlines. Skill in generating queries and reports. Ability to interpret and incorporate data from multiple tool sources. Skill in conducting queries and developing algorithms to analyze data structures. Knowledge of MITRE ATT&CK and D3FEND frameworks. Knowledge of the TCP/IP networking stack and network IDS technologies. Experience with searching network flow, PCAP, logs, and sensors for evidence of cyber-attack patterns, and hunting for Advanced Persistent Threats (APT). Experience with creating reusable hunt tactics and techniques. Knowledge related to the current state of cyber adversary tactics and trends. Knowledge of SIEM search language, search techniques, alerts, dashboards, and report building. Possess strong analytical skills and the ability to effectively research, write, communicate, and brief to varying levels of audiences, including at the executive level. Experience with complex malware analysis. Skill in identifying common encoding techniques (e.g., Exclusive Disjunction [XOR], American Standard Code for Information Interchange [ASCII], Unicode, Base64, Uuencode, Uniform Resource Locator [URL] encode). Skill in writing scripts using R, Python, PIG, HIVE, SQL, etc. Experience with EDR solutions. Ability to develop, update, and maintain standard operating procedures and other technical documentation. Possess any 1 of: CISSP (associate), CCSP, SSCP, GCIH, GNFA, GCIA, and any from the CSSP Analyst or Infrastructure Support. Full-Time Employee Compensation M9 Solutions’ pay range for this position is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include, but are not limited to, responsibilities of the position, education, experience, knowledge, skills, abilities, as well as internal equity, location, alignment with market data, applicable bargaining agreement (if a...