Command Post Technologies, Inc. (CPT) is seeking experienced Cyber Threat Hunters and Incident Responders for anticipated opportunities supporting the Defense Advanced Research Projects Agency (DARPA) in Arlington, Virginia.
The selected candidate will conduct proactive cyber threat detection, advanced security incident analysis, malware investigation, and incident response activities across enterprise information systems. This position requires hands-on cybersecurity experience, strong analytical skills, and the ability to identify malicious activity that may not be detected through traditional security monitoring.
Candidates should have experience investigating sophisticated cyber threats, analyzing security telemetry, and developing actionable recommendations to strengthen defensive capabilities.
Key Responsibilities
- Conduct proactive threat hunting activities to identify malicious activity, indicators of compromise, and suspicious behavior across enterprise environments.
- Investigate cybersecurity incidents using network traffic, endpoint telemetry, security event logs, and threat intelligence.
- Perform advanced incident analysis to determine attack vectors, scope, impact, and recommended mitigation actions.
- Analyze suspicious files, email activity, malware indicators, and other artifacts to identify potential threats.
- Conduct threat profiling and analysis of adversary tactics, techniques, and procedures (TTPs).
- Support incident response activities, including triage, investigation, containment, eradication, recovery, and post-incident analysis.
- Develop and refine threat detection methods, hunting procedures, and indicators to improve cybersecurity monitoring effectiveness.
- Analyze network flows, DNS activity, security alerts, and other sources to identify patterns associated with malicious activity.
- Coordinate threat intelligence and incident findings with cybersecurity operations personnel and authorized Government stakeholders.
- Support authorized security assessments and penetration testing activities when required.
- Prepare incident reports, threat assessments, technical findings, and recommendations for improving defensive capabilities.
- Collaborate with CND analysts, SIEM engineers, and other technical personnel to improve threat detection and incident response processes.
