Corinth Consulting Group

Security Engineer

• Conduct research and development activities to address identified cybersecurity gaps and challenges
• Provide technical analysis and engineering support across cybersecurity operations and initiatives
• Assist with documenting analyses of alternatives and recommended security solutions
• Support development and enhancement of security processes, procedures, and controls
• Serve as a technical escalation point for complex cybersecurity issues
• Apply industry best practices to improve security operations and defensive capabilities
• Develop and maintain security controls and user stories aligned with recognized cybersecurity frameworks
• Perform scripting and analysis to support dashboards, metrics, and security visibility
• Support vulnerability analysis, penetration testing efforts, and security assessments as needed
• Collaborate across functional areas to ensure continuity of operations and effective solution integration

Cyber Security Solutions R&D Analyst

Analyst

• Operate and maintain security configurations and applications supporting incident response with 24x7 availability
• Provide 12x5 operational expertise for integration, deployment, recapitalization, operations, and maintenance of security technologies
• Develop, deploy, test, patch, upgrade, and optimize security incident response tools and devices
• Perform full-scope administration of SecOps tools, including configuration, access management, and system optimization
• Create and maintain procedures and technical documentation for SecOps hardware and software
• Use configuration management tools (e.g., Ansible, Chef, PowerShell) to manage and maintain systems
• Manage, implement, and tune signature sets across multiple monitoring technologies to maximize detection accuracy and minimize false positives
• Document all tuning activities in the Tools Tuning Activities Log
• Implement approved access requests, conduct user recertification, and remove unauthorized users from SecOps tools
• Assist stakeholders with tool access, reporting, queries, and continuous monitoring processes
• Support security tools hosted both on-premises and in cloud environments

SADOM Analyst

Threat Intelligence Specialist

• Provide 12x5 operational coverage and after-hours on-call support to detect, analyze, and mitigate advanced cyber threats
• Conduct advanced packet-level traffic analysis and reconstruct network activity to identify anomalies, trends, and threat patterns
• Perform in-depth web and application log analysis to identify suspicious or malicious behavior
• Search for indicators consistent with advanced persistent threats (APTs)
• Perform pattern, trend, and behavior analysis using multiple data sources
• Design, deploy, and manage deception technologies (e.g., honeypots, lures, traps)
• Conduct forensic analysis and documentation of malware incidents from initial compromise through remediation
• Collaborate with SOC teams to assess and monitor key risk areas, including public-facing systems and sensitive databases
• Develop and maintain SOPs, provide training, and support implementation of security solutions
• Produce clear, comprehensive reports and actionable recommendations based on findings
• Identify opportunities to enhance cyber detection capabilities and close security gaps
• Support cyber requirements analysis and tracking activities

Advanced Threat Hunter

Support Engineer

• Perform digital forensic investigations using tools such as EnCase, FTK, AXIOM, or similar platforms
• Use cybersecurity tools (e.g., FireEye, Microsoft ATA, Splunk, Exabeam, Stealthwatch, Wireshark) to support incident detection and response
• Conduct malware analysis, reverse engineering, and code disassembly using tools such as IDA Pro
• Utilize debugging tools including ollydbg, WinDbg, and Immunity Debugger to analyze malicious activity
• Analyze malicious code to determine functionality, impact, and indicators of compromise
• Support and lead incident response activities, including containment, eradication, and recovery
• Work across multiple operating systems and programming environments to support forensic analysis
• Use Linux/UNIX command-line tools and apply TCP/IP and networking concepts during investigations
• Maintain detailed, accurate documentation of forensic findings and security incidents
• Ensure all activities comply with established security protocols, policies, and procedures

Cyber Security Solutions R&D Analyst

SADOM Analyst

Advanced Threat Hunter

Investigation Support Analyst