Job Description

Wits Solutions Inc. (WITS) is a SBA certified Small Disadvantaged Business with headquarters in the metropolitan Washington D.C. area. WITS has been providing best-in-class solutions in professional IT and administrative consulting to various Federal, State, Local and commercial customers. At WITS, we believe in working not for our clients but with them. This is why right from the beginning; our analysts and solution-builders work closely with our clients to ensure that the project outcomes continue to deliver value long into the future.

SECURITY CLEARANCE

Current DoD Top Secret; eligible for IT-I Critical Sensitive / Tier 5 (T5) at time of proposal submission.

EDUCATION/CERTIFICATIONS MANDATORY

No separate degree minimum is stated in the task-order PWS. DoD 8570/8140 baseline certification required, DLA-approved CE certification required.

WORK EXPERIENCE MANDATORY

Minimum 5 years technical experience in at least one of: Threat Intelligence, Cybersecurity Incident Response, Penetration Testing, Reverse Engineering, or Digital Forensics; plus 3 years analyzing attacker techniques at all levels of attack. Knowledge of security challenges across multiple operating systems; ability to work with large data sets; experience with Splunk, Python and PowerShell; ability to convert threat intelligence into actionable information; knowledge of MITRE ATT&CK; ability to document threat-hunting operations through data-driven narratives.

EDUCATION/CERTIFICATIONS NICE TO HAVE

Advanced cyber-defense, incident-response, threat-hunting, GIAC/SANS, CISSP, or related certifications are advantageous when aligned with assigned DoDM 8140.03 work roles and DLA-approved certification requirements.

WORK EXPERIENCE NICE TO HAVE

Recent DoD/DLA CSSP or CERT experience; enterprise threat hunting; APT analysis; malware/forensics; custom hunt automation; Splunk detection engineering; classified SOC/CERT operations.

ROLES AND RESPONSIBILITIES

• Proactively search for undetected threats within DLA networks and initiate investigations into unusual or malicious behavior.
• Analyze raw log and network data and coordinate with Threat Detection and Incident Response analysts to generate hunting leads.
• Correlate enterprise activity with current cyber threat intelligence and identify mitigations for key vulnerabilities.
• Lead analysis of APT or other compromises discovered during hunting operations.
• Develop threat-hunting strategies, tools and automation, using technologies such as Splunk, Python and PowerShell.
• Perform incident response for critical security incidents.
• Apply MITRE ATT&CK and document hunting operations using data-supported narratives.

Job Tags

Similar Jobs