Job Summary

Senior Threat Hunter & Incident Responder

Lititz, PA Remote

Senior Level

Full-Time

Legal residents of one of the following states:
AK, AL, AR, AZ, CT, DE, FL, GA, IA, ID, IN, KS, KY, LA, MD, ME, MI, MN, MO, MS, NC, ND, NH, NM, NV, OH, OK, PA, SC, SD, TN, TX, UT, VA, VT, WI, WV, or WY

W-2 candidates only, H-1B sponsorship not available

Responsibilities

Real-Time Monitoring: Actively monitor SIEM, IDS/IPS, and EDR tools to detect potential security incidents.
Proactive Threat Identification: Conduct threat-hunting activities to identify threats that may have bypassed existing security controls, using a combination of manual analysis and automated tools.
Data Analysis: Analyze large datasets from SIEM, EDR, network traffic, and other sources to identify patterns indicative of malicious activity or make recommendations for tool improvement.
Threat Intelligence Integration: Leverage threat intelligence feeds to inform hunting activities and stay up-to-date on the latest adversarial tactics, techniques, and procedures (TTPs).
Incident Analysis: Analyze malicious code, network traffic, and system logs to identify the root cause of incidents, potential vulnerabilities, and Indicators of Compromise (IoCs).
Documentation: Create detailed incident reports, including root cause analysis, mitigation actions, and lessons learned, ensuring thorough documentation for future reference.
Continuous Improvement: Stay informed about emerging threats, frameworks, and best practices to advocate for proactive strategies and controls. Regularly evaluate the organization’s threat landscape & incident response protocols to recommend improvements or additions to defense preparations.

open Full Job Listing in new window

Join the Team

Personal Information

Job Questions

Step 1 of 2

Job Application for Senior Threat Hunter & Incident Responder

Senior Threat Hunter & Incident Responder

Personal Information

Legal First NameRequired

Initial

Legal Last NameRequired

Preferred First Name

EmailRequired

Phone Required

I agree to receive automated text message updates and be contacted by Clark associates about my application.

Message and data rates may apply. Message frequency varies.

View Privacy Policy View Terms and Conditions

Street AddressRequired

Begin typing your street address to search.

No results

Apartment, Suite, etc.

ZIP Code Required

State

City

Search for address or enter ZIP Code to fill in State and City.

ZIP Code
State
City

This job is not available in your state.

Applicants must reside in or be willing to relocate to the following states: AK, AL, AR, AZ, CT, DE, FL, GA, IA, ID, IN, KS, KY, LA, MD, ME, MI, MN, MO, MS, NC, ND, NH, NM, NV, OH, OK, PA, SC, SD, TN, TX, UT, VA, VT, WI, WV, or WY.

Relocation costs are not covered by the company.

Are you willing and able to relocate (at your expense) to our operating area?Required

No Yes

Search Similar Jobs

Your home address is more than 50 miles from the job location.

Are you a current or former employee of a Clark Associates Affiliated Company?Required

No Yes

Employment DetailsRequired Please specify if you are a current or previous employee, employment dates, department, job title, etc.

Are you legally authorized to work in the United States?Required

No Yes

Will you now or will you in the future require employment visa sponsorship? (e.g., H1-B, O-1)Required

No Yes

Visa sponsorship is not available for this job.

You may still apply but we are not able to offer sponsorship for this position.

Search Similar Jobs

Highest Level of Education

Schools Attended

Start typing to search schools

List any relevant training or certifications

How did you hear about us?Required

College NameRequired

No results

Referrers(s)Required

Enter up to 3 referrers. Separate names with a comma.

Please ExplainRequired

Job Questions

Resume Required

Upload Enter Work History

1 PDF or DOCX accepted
50 MB maximum

Cover letter

Tell us why you are interested in the Senior Threat Hunter & Incident Responder position.

Upload Enter Cover Letter

1 PDF or DOCX accepted
50 MB maximum

Desired Salary

Self-Identification of Race/Ethnicity

Instructions

Please read all instructions carefully before completing this form

Anti-Discrimination Notice. It is an unlawful employment practice for an employer to fail or refuse to hire or discharge any individual, or otherwise to discriminate against any individual with respect to that individual’s terms and conditions of employment, because of such individual’s race, color, religion, sex, or national origin.

This employer is subject to certain nondiscrimination and affirmative action recordkeeping and reporting requirements which require the employer to invite employees to voluntarily self-identify their race/ethnicity. Submission of this information is voluntary and refusal to provide it will not subject you to any adverse treatment. The information obtained will be kept confidential and may only be used in accordance with the provisions of applicable federal laws, executive orders, and regulations, including those which require the information to be summarized and reported to the Federal Government for civil rights enforcement purposes.

If you choose not to self-identify your race/ethnicity at this time, the federal government requires this employer to determine this information by visual survey and/or other available information.

For civil rights monitoring and enforcement purposes only, all race/ethnicity information will be collected and reported in the seven categories identified below. The definitions for each category have been established by the federal government. If you choose to voluntarily self-identify, you may select only one of the options presented below.

Invitation to Self-Identify

Please answer the following questions

Voluntary Self-Identification of Veterans

This employer is a Government contractor subject to the Vietnam Era Veterans' Readjustment Assistance Act of 1974, as amended by the Jobs for Veterans Act of 2002, 38 U.S.C. 4212 (VEVRAA), which requires Government contractors to take affirmative action to employ and advance in employment: (1) disabled veterans; (2) recently separated veterans; (3) active duty wartime or campaign badge veterans; and (4) Armed Forces service medal veterans. These classifications are defined as follows:

Definitions

A “disabled veteran” is one of the following:

A veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or
A person who was discharged or released from active duty because of a service-connected disability.

A “recently separated veteran” means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An “active duty wartime or campaign badge veteran” means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An “Armed forces service medal veteran” means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.

Protected veterans may have additional rights under USERRA—the Uniformed Services Employment and Reemployment Rights Act. In particular, if you were absent from employment in order to perform service in the uniformed service, you may be entitled to be reemployed by your employer in the position you would have obtained with reasonable certainty if not for the absence due to service. For more information, call the U.S. Department of Labor's Veterans Employment and Training Service (VETS), toll-free, at 1-866-4-USA-DOL.

Self-Identification

As a Government contractor subject to VEVRAA, we are required to submit a report to the United States Department of Labor each year identifying the number of our employees belonging to each specified “protected veteran” category. If you believe you belong to any of the categories of protected veterans listed above, please select the appropriate one below.

I belong to the following classifications of protected veterans (Choose all that apply):

veteran classification options

Disabled Veteran Recently Separated Veteran Include Military Discharge Date

Separation Date

Active Wartime or Campaign Badge Veteran Armed Forces Service Medal Veteran

I am a protected veteran, but I choose not to self-identify the classifications to which I belong. I am NOT a protected veteran.

First and Last Name

Date

Voluntary Self-Identification of Disability

OMB Control Number 1250-0005

Why are you being asked to complete this form?

We are a federal contractor or subcontractor required by law to provide equal employment opportunity to qualified people with disabilities. We are also required to measure our progress toward having at least 7% of our workforce be individuals with disabilities. To do this, we must ask applicants and employees if they have a disability or have ever had a disability. Because a person may become disabled at any time, we ask all of our employees to update their information at least every five years.

Identifying yourself as an individual with a disability is voluntary, and we hope that you will choose to do so. Your answer will be maintained confidentially and not be seen by selecting officials or anyone else involved in making personnel decisions. Completing the form will not negatively impact you in any way, regardless of whether you have self-identified in the past. For more information about this form or the equal employment obligations of federal contractors under Section 503 of the Rehabilitation Act, visit the U.S. Department of Labor’s Office of Federal Contract Compliance Programs (OFCCP) website at www.dol.gov/ofccp.

How do you know if you have a disability?

You are considered to have a disability if you have a physical or mental impairment or medical condition that substantially limits a major life activity, or if you have a history or record of such an impairment or medical condition. Disabilities include, but are not limited to:

Autism
Autoimmune disorder, for example, lupus, fibromyalgia, rheumatoid arthritis, or HIV/AIDS
Blind or low vision
Cancer
Cardiovascular or heart disease
Celiac disease
Cerebral palsy
Deaf or hard of hearing
Depression or anxiety
Diabetes
Epilepsy
Gastrointestinal disorders, for example, Crohn's Disease, or irritable bowel syndrome
Intellectual disability
Missing limbs or partially missing limbs
Nervous system condition for example, migraine headaches, Parkinson’s disease, or Multiple sclerosis (MS)
Psychiatric condition, for example, bipolar disorder, schizophrenia, PTSD, or major depression

Please select one:

Yes, I Have A Disability, Or Have A History/Record Of Having A Disability No, I Don’t Have A Disability, Or Have A History/Record Of Having A Disability I Don't Wish To Answer

Public Burden Statement: According to the Paperwork Reduction Act of 1995 no persons are required to respond to a collection of information unless such collection displays a valid OMB control number. This survey should take about 5 minutes to complete.

Senior Threat Hunter & Incident Responder

Lititz, PA Remote

Senior Level

Full-Time

W-2 candidates only, H-1B sponsorship not available

Responsibilities

Real-Time Monitoring: Actively monitor SIEM, IDS/IPS, and EDR tools to detect potential security incidents.
Proactive Threat Identification: Conduct threat-hunting activities to identify threats that may have bypassed existing security controls, using a combination of manual analysis and automated tools.
Data Analysis: Analyze large datasets from SIEM, EDR, network traffic, and other sources to identify patterns indicative of malicious activity or make recommendations for tool improvement.
Threat Intelligence Integration: Leverage threat intelligence feeds to inform hunting activities and stay up-to-date on the latest adversarial tactics, techniques, and procedures (TTPs).
Incident Analysis: Analyze malicious code, network traffic, and system logs to identify the root cause of incidents, potential vulnerabilities, and Indicators of Compromise (IoCs).
Documentation: Create detailed incident reports, including root cause analysis, mitigation actions, and lessons learned, ensuring thorough documentation for future reference.
Continuous Improvement: Stay informed about emerging threats, frameworks, and best practices to advocate for proactive strategies and controls. Regularly evaluate the organization’s threat landscape & incident response protocols to recommend improvements or additions to defense preparations.

open Full Job Listing in new window

Are you sure you want to exit this application?

Exiting this application will cancel your progress and you will have to restart the application.

Yes, Exit Application