Threat Hunter

ShorePoint Inc

. Provide first-line SOC support across 24x7x365 operations, including alert monitoring, triage, routing, escalation and response .

Posted 11/12/2026full-timeRemote • Virginia • United StatesMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in SOC operations, including alert monitoring, incident response, and threat intelligence analysis. Proficient in developing automation scripts and enhancing detection capabilities using SIEM tools and security analytics platforms.

Highest-signal resume keywords

SOC Operations SupportThreat Hunting MethodologiesSIEM Development and TuningCyber Threat AnalysisIncident Investigation

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Python ScriptingBash ScriptingMalware AnalysisEvent Timeline AnalysisSecurity Event CorrelationThreat Intelligence ReviewIncident ResponseAlert TriageLog AnalysisAnomaly Detection

Soft Skills

CommunicationCollaborationProblem-SolvingTime ManagementMulti-Tasking

Tools & Technologies

Elastic StackSplunkFireEyeCarbon BlackCrowdStrikeMalwarebytesCisco IronPortBluecoatPalo AltoOSSEC

Certifications & Qualifications

GIACCEPTCASSCWAPTCREA

Industry Keywords

CybersecurityMITRE ATT&CK Framework24x7x365 OperationsIoC IngestionFederal Threat IntelligenceSOC Performance MonitoringInsider ThreatSOP DevelopmentNetwork SecurityPhishing

Tech Stack

Tools & technologies

CloudCyber SecurityLinuxPythonSplunk

About the role

Key responsibilities & impact

Provide first-line SOC support across 24x7x365 operations, including alert monitoring, triage, routing, escalation and response
Monitor, analyze and investigate security events, network traffic and host-based detections
Perform proactive threat hunting and anomaly detection across SIEM and security tools
Conduct incident investigation, Cyber Threat Assessment and Remediation Analysis
Process and correlate incident indicators with threat intelligence
Tune and develop SIEM correlation rules, detection logic and detection use cases
Develop and maintain Python and Bash scripts and tools to automate SOC and incident response functions
Build IoC ingestion, log processing and SIEM integrations via APIs
Develop dashboards, visualizations and analytics for detection, reporting and SOC performance monitoring
Produce and maintain cybersecurity briefings, metrics, incident reports and stakeholder deliverables
Support threat intelligence operations by reviewing IoCs and translating intelligence into actionable detections
Coordinate with internal teams on Insider Threat, ROE, threat hunting, testing and after-action reporting
Support ticket tracking, customer security assessments, ad hoc investigations, tabletop exercises and lessons learned
Improve SOC detection capabilities, processes, communication and operational effectiveness
Participate in the rotating SOC on-call schedule

Requirements

What you’ll need

5+ years of technical experience
Deep understanding of cyber threat TTPs, threat hunting methodologies and the MITRE ATT&CK framework
Experience supporting 24x7x365 SOC operations, including alert monitoring, triage, analysis, response and threat intelligence review/action
Ability to manage multiple alerts and tickets in parallel and perform end-to-end triage through resolution
Experience analyzing and correlating security events across endpoint, network, email security tools, SIEM platforms and federal threat intelligence such as CISA
Proficiency with enterprise security tools and platforms including FireEye, Elastic, Sourcefire, Malwarebytes, Carbon Black/Bit9, Splunk, Prisma Cloud, Cisco IronPort, Bluecoat, Palo Alto, Cylance and OSSEC
Hands-on experience with enterprise SIEM or security analytics platforms such as Elastic Stack and Splunk
Experience with malware analysis and attack vectors involving malware, data exposure, phishing and social engineering
Experience developing and maintaining SOPs
Experience performing event timeline analysis and investigating logs across Windows/Linux environments and network security devices
Ability to work 8:45 AM–5:15 PM Eastern Time
Ability to participate in a rotating SOC on-call schedule
Proficiency with one or more toolsets such as Bit9/CarbonBlack, CrowdStrike, FireEye ETP and Elastic Kibana
U.S. citizenship required for federal contract compliance
Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Mathematics, Engineering or a related field is beneficial
One or more certifications such as GIAC, CEPT, CASS, CWAPT or CREA is beneficial

Benefits

Comp & perks

144 hours of PTO
11 holidays
85% of insurance premiums covered
Healthcare benefits through major carriers
401(k)
Continuing education
Certification maintenance and reimbursement
Career development opportunities
Technical and professional growth support