5 jobs found

Job Summary The Cyber Threat Hunting Analyst serves as a technical lead for threat hunting, focusing on identifying advanced threats that evade traditional security controls. They design and drive hunt campaigns across endpoint, identity, cloud, email, and DNS/proxy data, and own the conversion of those hunts into durable detection and monitoring improvements. The role also provides guidance and mentorship to other hunters and analysts and represents threat hunting in cross-team detection and response strategy discussions. This is a hands-on role for an analyst with solid SOC/IR or detection experience who enjoys investigative work more than reacting solely to alerts. Duties and Responsibilities Lead complex, proactive threat-hunting investigations across EDR, SIEM/log analytics, identity (AD/Azure AD/IdP), cloud platforms, email, DNS and web proxy data to uncover previously undetected threats, attacker techniques and misconfigurations that bypass existing controls Own the threat-hunting roadmap and backlog, defining and prioritizing hunt topics and maintaining playbooks and use cases based on threat intelligence, recent campaigns, penetration-test findings and knowledge of the environment Establish and refine behavioral baselines for key users, systems and applications, using those baselines to distinguish benign anomalies from meaningful indicators of compromise or abuse during hunts and investigations Translate successful hunts and identified patterns into detection content (rules, analytics, scheduled searches, watchlists) and lead the testing and tuning of new or updated detections and models with Detection Engineering to ensure effective, low-noise coverage before production rollout Collaborate with CTI analysts, SOC/Incident Response and offensive security/pentesters to operationalize intelligence, expand high-priority investigations and ensure exploited attack paths and high-risk behaviors are visible and monitored going forward. Maintain structured documentation of hunt hypotheses, methods, data sources, findings and outcomes; develop and maintain hunt playbooks and reusable queries; and serve as a technical mentor and escalation point for other hunters and analysts. Qualifications Education Required: Bachelor's degree in Cybersecurity, Computer Science Education Preferred: Master's degree in Cybersecurity, Computer Science Experience Required: 6+ years of experience in roles such as SOC analyst, incident responder, detection engineer, or threat hunter, with demonstrable experience analyzing security telemetry. Experience Preferred: 8+ years of experience in roles such as SOC analyst, incident responder, detection engineer, or threat hunter, with demonstrable experience analyzing security telemetry. Licenses/Certifications Preferred: GCDA, GCIH, SC-200 Technical Skills and Abilities: Advanced experience leading multi-source threat hunts across EDR, SIEM/log analytics, identity (AD/Azure AD/IdP), cloud, email, DNS and web proxy data. Strong proficiency with SIEM / log query languages (e.g., KQL, S1QL) and building complex, ATT&CK-aligned hunting queries and analytics. Deep understanding of attacker TTPs and the MITRE ATT&CK framework, especially around credential theft, persistence, lateral movement, command and control, and data exfiltration. Proven ability to establish and refine behavioral baselines for users, systems and applications, and to use those baselines to distinguish benign anomalies from meaningful indicators of compromise. Experience designing, testing and tuning detections and analytics derived from hunt results, including evaluating false-positive/false-negative trade-offs. Strong collaboration skills working with CTI, SOC/Incident Response, penetration testers and detection engineers to operationalize intelligence, expand investigations and validate coverage of attack paths. Excellent documentation and communication skills, including producing structured hunt reports, maintaining playbooks and reusable queries, and briefing security leadership on findings and coverage. Ability to act as a technical mentor and escalation point for other hunters and analysts, reviewing their hunts and improving analytical rigor and consistency. Additional Requirements Language Requirements: Strong written and verbal communication skills in English are required. Physical Demands: Reasonable accommodations will be made to enable individuals with disabilities to perform the essential functions of this job. May occasionally be required to support high-priority investigations or coordinated hunts outside of standard business hours. Travel Requirements: Minimal travel. Work Environment: Hybrid Role based in the Houston office Decision Making Authority Decisions to be made independently without direction or supervision: Selects hypotheses, data sources, queries and investigative approaches for assigned hunts. Determines which anomalies warrant deeper investigation and which can be closed as benign, documenting rationale. Prioritizes hunt workload across multiple concurrent hypotheses and campaigns based on risk and available data. Proposes new or modified detections and analytics based on hunt results and observed patterns. Structures and documents hunt outputs, including timelines, findings and recommended follow-up actions. Decisions made with review/approval of other individuals/leadership: Final selection and deployment of new or significantly changed detections and analytics into production monitoring. Changes to hunt roadmap focus that materially affect broader detection strategy or team priorities. Recommendations that drive new logging/data collection requirements or significant changes to existing telemetry. Escalation of major risks and gaps in coverage to leadership, including proposals for additional resourcing or tooling.

Job Description Job Description Overview CTG is seeking to fill a Technology Systems Specialist opening for our client. Location: Blaine, WA Overview Are you passionate about technology, thrive on variety, and love engaging with people? Join our Service Delivery Team as a Technology Systems Specialist, a role that puts you at the heart of digital transformation. You'll be part of a team supporting a broad spectrum of technologies and working directly with end users, technical teams, and business stakeholders. This is not your typical desk job: expect to be hands-on, mobile, and constantly learning as you tackle new challenges every day. What Makes This Role Unique? Multi-Faceted Impact: From cloud systems to on-premises servers, networking hardware to mobile devices, you'll be the go-to expert for a wide range of technologies. Field-Facing Engagement: You'll work directly with users across the site, translating technical concepts into practical solutions and ensuring technology empowers every part of the operation. Team Leadership & Collaboration: Lead initiatives, back up your teammates, and help shape the future of digital technology at the refinery. Team members are subject matter experts for one or more of our products and can learn new skills along the way. If you don't have experience with everything we support don't let that stop you from applying! Key Team ResponsibilitiesSystems Administration Support and maintain both cloud and on-premises applications and servers, ensuring stability and uptime. Collaborate with central support teams and use tools like PowerShell for scripting, automation, patching, and troubleshooting. Maintain technical documentation, dashboards, and KPIs to keep the team and stakeholders informed. Develop and manage SharePoint solutions, workflows, and permissions, integrating with file systems as needed. Support database queries, dashboard creation, and reporting (Power BI). Cyber Security & Risk Management Implement security best practices across all systems, including regular patching, vulnerability management, and secure configuration. Manage user permissions and monitor access to sensitive systems, supporting multi-factor authentication and encryption technologies. Participate in the detection, reporting, and resolution of security incidents, collaborating with central security teams to investigate and remediate threats. Promote a culture of security by educating end users on safe technology practices, phishing prevention, and the importance of strong passwords. Stay current with emerging cyber threats and technologies, recommending and implementing improvements to security policies and procedures. Networking & Devices Deploy, configure, and support routers, firewalls, switches, wireless/RF, fiber, and cellular infrastructure. Manage and troubleshoot endpoints including access points, printers, cameras, CCTV, alarm systems, and digital signage. Paging, AV, access control and more. Mobility & Customer Engagement Oversee mobility and cellular solutions, including account management, device ordering, provisioning, maintenance, and repair. Provide end-user support for mobile devices, including diagnostics, personal data migration, and company services provisioning (Intune, AirWatch, MDM). Deliver exceptional customer service, ensuring users feel supported and empowered by technology. What We're Looking For Associate degree or certifications in IT, network administration, or equivalent practical experience. Strong customer service skills and a collaborative, team-oriented mindset. A commitment to workplace safety, organization, and attention to detail. Excellent troubleshooting abilities and communication skills-both verbal and written. Ability to explain technical concepts to non-technical audiences. Personable, friendly, and professional approach to every interaction. Why Join Us? This is a role for someone who wants to make a visible difference, enjoys variety, and is energized by field work and direct user engagement. If you're ready to be a key player in a high-impact, multi-disciplinary IT team, we want to hear from you! Excellent verbal and written English communication skills and the ability to interact professionally with a diverse group are required. CTG does not accept unsolicited resumes from headhunters, recruitment agencies, or fee-based recruitment services for this role. To Apply: To be considered, please apply directly to this requisition using the link provided . For additional information, please contact Rebecca Olan at . Kindly forward this to any other interested parties. Thank you! The expected base salary for this position ranges from $75,000 to $95,000. Salary offers are based on a wide range of factors including relevant skills, training, experience, education, market factors, and where applicable, licensure or certifications obtained. In addition to salary, a competitive benefit package is also offered.

Job Summary The Cyber Threat Hunting Analyst serves as a technical lead for threat hunting, focusing on identifying advanced threats that evade traditional security controls. They design and drive hunt campaigns across endpoint, identity, cloud, email, and DNS/proxy data, and own the conversion of those hunts into durable detection and monitoring improvements. The role also provides guidance and mentorship to other hunters and analysts and represents threat hunting in cross-team detection and response strategy discussions. This is a hands-on role for an analyst with solid SOC/IR or detection experience who enjoys investigative work more than reacting solely to alerts. Duties and Responsibilities Lead complex, proactive threat-hunting investigations across EDR, SIEM/log analytics, identity (AD/Azure AD/IdP), cloud platforms, email, DNS and web proxy data to uncover previously undetected threats, attacker techniques and misconfigurations that bypass existing controls Own the threat-hunting roadmap and backlog, defining and prioritizing hunt topics and maintaining playbooks and use cases based on threat intelligence, recent campaigns, penetration-test findings and knowledge of the environment Establish and refine behavioral baselines for key users, systems and applications, using those baselines to distinguish benign anomalies from meaningful indicators of compromise or abuse during hunts and investigations Translate successful hunts and identified patterns into detection content (rules, analytics, scheduled searches, watchlists) and lead the testing and tuning of new or updated detections and models with Detection Engineering to ensure effective, low-noise coverage before production rollout Collaborate with CTI analysts, SOC/Incident Response and offensive security/pentesters to operationalize intelligence, expand high-priority investigations and ensure exploited attack paths and high-risk behaviors are visible and monitored going forward. Maintain structured documentation of hunt hypotheses, methods, data sources, findings and outcomes; develop and maintain hunt playbooks and reusable queries; and serve as a technical mentor and escalation point for other hunters and analysts. Qualifications Education Required: Bachelor's degree in Cybersecurity, Computer Science Education Preferred: Master's degree in Cybersecurity, Computer Science Experience Required: 6+ years of experience in roles such as SOC analyst, incident responder, detection engineer, or threat hunter, with demonstrable experience analyzing security telemetry. Experience Preferred: 8+ years of experience in roles such as SOC analyst, incident responder, detection engineer, or threat hunter, with demonstrable experience analyzing security telemetry. Licenses/Certifications Preferred: GCDA, GCIH, SC-200 Technical Skills and Abilities: Advanced experience leading multi-source threat hunts across EDR, SIEM/log analytics, identity (AD/Azure AD/IdP), cloud, email, DNS and web proxy data. Strong proficiency with SIEM / log query languages (e.g., KQL, S1QL) and building complex, ATT&CK-aligned hunting queries and analytics. Deep understanding of attacker TTPs and the MITRE ATT&CK framework, especially around credential theft, persistence, lateral movement, command and control, and data exfiltration. Proven ability to establish and refine behavioral baselines for users, systems and applications, and to use those baselines to distinguish benign anomalies from meaningful indicators of compromise. Experience designing, testing and tuning detections and analytics derived from hunt results, including evaluating false-positive/false-negative trade-offs. Strong collaboration skills working with CTI, SOC/Incident Response, penetration testers and detection engineers to operationalize intelligence, expand investigations and validate coverage of attack paths. Excellent documentation and communication skills, including producing structured hunt reports, maintaining playbooks and reusable queries, and briefing security leadership on findings and coverage. Ability to act as a technical mentor and escalation point for other hunters and analysts, reviewing their hunts and improving analytical rigor and consistency. Additional Requirements Language Requirements: Strong written and verbal communication skills in English are required. Physical Demands: Reasonable accommodations will be made to enable individuals with disabilities to perform the essential functions of this job. May occasionally be required to support high-priority investigations or coordinated hunts outside of standard business hours. Travel Requirements: Minimal travel. Work Environment: Hybrid Role based in the Houston office Decision Making Authority Decisions to be made independently without direction or supervision: Selects hypotheses, data sources, queries and investigative approaches for assigned hunts. Determines which anomalies warrant deeper investigation and which can be closed as benign, documenting rationale. Prioritizes hunt workload across multiple concurrent hypotheses and campaigns based on risk and available data. Proposes new or modified detections and analytics based on hunt results and observed patterns. Structures and documents hunt outputs, including timelines, findings and recommended follow-up actions. Decisions made with review/approval of other individuals/leadership: Final selection and deployment of new or significantly changed detections and analytics into production monitoring. Changes to hunt roadmap focus that materially affect broader detection strategy or team priorities. Recommendations that drive new logging/data collection requirements or significant changes to existing telemetry. Escalation of major risks and gaps in coverage to leadership, including proposals for additional resourcing or tooling.

Job Summary The Cyber Threat Hunting Analyst serves as a technical lead for threat hunting, focusing on identifying advanced threats that evade traditional security controls. They design and drive hunt campaigns across endpoint, identity, cloud, email, and DNS/proxy data, and own the conversion of those hunts into durable detection and monitoring improvements. The role also provides guidance and mentorship to other hunters and analysts and represents threat hunting in cross-team detection and response strategy discussions. This is a hands-on role for an analyst with solid SOC/IR or detection experience who enjoys investigative work more than reacting solely to alerts. Duties and Responsibilities Lead complex, proactive threat-hunting investigations across EDR, SIEM/log analytics, identity (AD/Azure AD/IdP), cloud platforms, email, DNS and web proxy data to uncover previously undetected threats, attacker techniques and misconfigurations that bypass existing controls Own the threat-hunting roadmap and backlog, defining and prioritizing hunt topics and maintaining playbooks and use cases based on threat intelligence, recent campaigns, penetration-test findings and knowledge of the environment Establish and refine behavioral baselines for key users, systems and applications, using those baselines to distinguish benign anomalies from meaningful indicators of compromise or abuse during hunts and investigations Translate successful hunts and identified patterns into detection content (rules, analytics, scheduled searches, watchlists) and lead the testing and tuning of new or updated detections and models with Detection Engineering to ensure effective, low-noise coverage before production rollout Collaborate with CTI analysts, SOC/Incident Response and offensive security/pentesters to operationalize intelligence, expand high-priority investigations and ensure exploited attack paths and high-risk behaviors are visible and monitored going forward. Maintain structured documentation of hunt hypotheses, methods, data sources, findings and outcomes; develop and maintain hunt playbooks and reusable queries; and serve as a technical mentor and escalation point for other hunters and analysts. Qualifications Education Required: Bachelor's degree in Cybersecurity, Computer Science Education Preferred: Master's degree in Cybersecurity, Computer Science Experience Required: 6+ years of experience in roles such as SOC analyst, incident responder, detection engineer, or threat hunter, with demonstrable experience analyzing security telemetry. Experience Preferred: 8+ years of experience in roles such as SOC analyst, incident responder, detection engineer, or threat hunter, with demonstrable experience analyzing security telemetry. Licenses/Certifications Preferred: GCDA, GCIH, SC-200 Technical Skills and Abilities: Advanced experience leading multi-source threat hunts across EDR, SIEM/log analytics, identity (AD/Azure AD/IdP), cloud, email, DNS and web proxy data. Strong proficiency with SIEM / log query languages (e.g., KQL, S1QL) and building complex, ATT&CK-aligned hunting queries and analytics. Deep understanding of attacker TTPs and the MITRE ATT&CK framework, especially around credential theft, persistence, lateral movement, command and control, and data exfiltration. Proven ability to establish and refine behavioral baselines for users, systems and applications, and to use those baselines to distinguish benign anomalies from meaningful indicators of compromise. Experience designing, testing and tuning detections and analytics derived from hunt results, including evaluating false-positive/false-negative trade-offs. Strong collaboration skills working with CTI, SOC/Incident Response, penetration testers and detection engineers to operationalize intelligence, expand investigations and validate coverage of attack paths. Excellent documentation and communication skills, including producing structured hunt reports, maintaining playbooks and reusable queries, and briefing security leadership on findings and coverage. Ability to act as a technical mentor and escalation point for other hunters and analysts, reviewing their hunts and improving analytical rigor and consistency. Additional Requirements Language Requirements: Strong written and verbal communication skills in English are required. Physical Demands: Reasonable accommodations will be made to enable individuals with disabilities to perform the essential functions of this job. May occasionally be required to support high-priority investigations or coordinated hunts outside of standard business hours. Travel Requirements: Minimal travel. Work Environment: Hybrid Role based in the Houston office Decision Making Authority Decisions to be made independently without direction or supervision: Selects hypotheses, data sources, queries and investigative approaches for assigned hunts. Determines which anomalies warrant deeper investigation and which can be closed as benign, documenting rationale. Prioritizes hunt workload across multiple concurrent hypotheses and campaigns based on risk and available data. Proposes new or modified detections and analytics based on hunt results and observed patterns. Structures and documents hunt outputs, including timelines, findings and recommended follow-up actions. Decisions made with review/approval of other individuals/leadership: Final selection and deployment of new or significantly changed detections and analytics into production monitoring. Changes to hunt roadmap focus that materially affect broader detection strategy or team priorities. Recommendations that drive new logging/data collection requirements or significant changes to existing telemetry. Escalation of major risks and gaps in coverage to leadership, including proposals for additional resourcing or tooling.

Job Description Job Description Overview CTG is seeking to fill a Technology Systems Specialist opening for our client. Location: Blaine, WA Overview Are you passionate about technology, thrive on variety, and love engaging with people? Join our Service Delivery Team as a Technology Systems Specialist, a role that puts you at the heart of digital transformation. You'll be part of a team supporting a broad spectrum of technologies and working directly with end users, technical teams, and business stakeholders. This is not your typical desk job: expect to be hands-on, mobile, and constantly learning as you tackle new challenges every day. What Makes This Role Unique? Multi-Faceted Impact: From cloud systems to on-premises servers, networking hardware to mobile devices, you'll be the go-to expert for a wide range of technologies. Field-Facing Engagement: You'll work directly with users across the site, translating technical concepts into practical solutions and ensuring technology empowers every part of the operation. Team Leadership & Collaboration: Lead initiatives, back up your teammates, and help shape the future of digital technology at the refinery. Team members are subject matter experts for one or more of our products and can learn new skills along the way. If you don't have experience with everything we support don't let that stop you from applying! Key Team ResponsibilitiesSystems Administration Support and maintain both cloud and on-premises applications and servers, ensuring stability and uptime. Collaborate with central support teams and use tools like PowerShell for scripting, automation, patching, and troubleshooting. Maintain technical documentation, dashboards, and KPIs to keep the team and stakeholders informed. Develop and manage SharePoint solutions, workflows, and permissions, integrating with file systems as needed. Support database queries, dashboard creation, and reporting (Power BI). Cyber Security & Risk Management Implement security best practices across all systems, including regular patching, vulnerability management, and secure configuration. Manage user permissions and monitor access to sensitive systems, supporting multi-factor authentication and encryption technologies. Participate in the detection, reporting, and resolution of security incidents, collaborating with central security teams to investigate and remediate threats. Promote a culture of security by educating end users on safe technology practices, phishing prevention, and the importance of strong passwords. Stay current with emerging cyber threats and technologies, recommending and implementing improvements to security policies and procedures. Networking & Devices Deploy, configure, and support routers, firewalls, switches, wireless/RF, fiber, and cellular infrastructure. Manage and troubleshoot endpoints including access points, printers, cameras, CCTV, alarm systems, and digital signage. Paging, AV, access control and more. Mobility & Customer Engagement Oversee mobility and cellular solutions, including account management, device ordering, provisioning, maintenance, and repair. Provide end-user support for mobile devices, including diagnostics, personal data migration, and company services provisioning (Intune, AirWatch, MDM). Deliver exceptional customer service, ensuring users feel supported and empowered by technology. What We're Looking For Associate degree or certifications in IT, network administration, or equivalent practical experience. Strong customer service skills and a collaborative, team-oriented mindset. A commitment to workplace safety, organization, and attention to detail. Excellent troubleshooting abilities and communication skills-both verbal and written. Ability to explain technical concepts to non-technical audiences. Personable, friendly, and professional approach to every interaction. Why Join Us? This is a role for someone who wants to make a visible difference, enjoys variety, and is energized by field work and direct user engagement. If you're ready to be a key player in a high-impact, multi-disciplinary IT team, we want to hear from you! Excellent verbal and written English communication skills and the ability to interact professionally with a diverse group are required. CTG does not accept unsolicited resumes from headhunters, recruitment agencies, or fee-based recruitment services for this role. To Apply: To be considered, please apply directly to this requisition using the link provided . For additional information, please contact Rebecca Olan at . Kindly forward this to any other interested parties. Thank you! The expected base salary for this position ranges from $75,000 to $95,000. Salary offers are based on a wide range of factors including relevant skills, training, experience, education, market factors, and where applicable, licensure or certifications obtained. In addition to salary, a competitive benefit package is also offered.