Hybrid Senior Cyber Hunt and Respond Engineer

at Truist

• Job title: Senior Cyber Hunt and Respond Engineer
• Job type: Full Time
• Experience level: Senior
• Salary: Not specified
• Degree requirement: Bachelor's Degree
• Tech skills: Cloud, Cyber Security, Unix
• Location requirements: Hybrid, Atlanta, United States

About the role

• Senior Engineer in Cyber Hunt & Respond at Truist, focusing on proactive Threat Hunting and Incident Response. Engaging in mentorship and collaboration across IT/Cyber functions in a dynamic environment.

Responsibilities

• The Cyber Hunt & Respond Senior Engineer is part of the 24/7 Cyber Fusion Center
• Proactive Threat Hunting & reactive Incident Response coverage
• Search through large, diverse sets of data to discover previously undetected threats
• Develop new hypotheses on potential adversarial attacks
• Work with internal groups to express data needs for threat exploration
• Setup and lead incident response calls
• Collaborate across various IT/Cyber functions
• Mentorship for others interested in data science, threat hunting, or incident response

Requirements

• Bachelor’s degree in Computer Science, Computer Engineering, Cybersecurity, or related field
• 8 years of experience in Cybersecurity or related work
• Knowledge of one or more cloud platforms and cloud security
• Knowledge of general information technology (IT) and cybersecurity
• Knowledge of computer networking concepts and protocols, and network security methodologies
• Knowledge of network traffic analysis and packet-level analysis using appropriate tools (e.g., Wireshark, tcpdump)
• Knowledge of operating systems, including Windows/Unix ports and services
• Knowledge of modern identity and access management concepts
• Knowledge of phishing tactics and techniques
• Knowledge of advanced cyber threats and vulnerabilities
• Knowledge of cyber-attack stages (e.g., reconnaissance, scanning, enumeration, gaining access, escalation of privileges, maintaining access, network exploitation, covering tracks)
• Knowledge of adversarial tactics, techniques, and procedures
• Knowledge of intrusion detection methodologies and techniques for detecting host and network-based intrusions
• Knowledge of incident response and handling methodologies
• Knowledge of countermeasures to address a variety of threats
• Knowledge around leveraging automation, ML, and/or AI
• Knowledge of advanced threat hunting techniques
• Knowledge of types of digital forensics data and how to recognize them
• Knowledge of types and collection of persistent data
• Knowledge of file system implementations (e.g., NTFS, FAT, EXT)
• Knowledge of which system files (e.g., log files, registry files, configuration files) contain relevant information and where to find those system files
• Knowledge of processes for seizing and preserving digital evidence

Benefits

• Medical, dental, vision insurance
• Life insurance
• Disability insurance
• 401k plan
• No less than 10 days of vacation during the first year
• 10 sick days
• Paid holidays