Cybervance, Inc.

Threat Intelligence Specialist

• Identify threat tactics, methodologies, gaps, and shortfalls aligned with the MITRE ATT&CK Framework and the Azure Threat Research Matrix (ATRM).
• Perform Hypothesis-based or Intelligence-based Cyber Threat Hunts to identify threats and risks within environments.
• Use cloud-native techniques and methods to identify and create threat detections for automated response activities.
• Use Agile methodology to organize intelligence, hunts and project status.
• Independently research intelligence reports to find actionable data for conducting intel or hypothesis-based hunts.
• Explore and correlate large data sets to uncover novel attack techniques, monitor and catalog changes in activity group tradecraft, and investigate alerts for enterprise customers.
• Conduct analysis of log files, evidence, and other information to determine best methods for identifying the perpetrator(s) of a network intrusion.
• Confirm what is known about an intrusion and discover new information via dynamic analysis.
• Create a forensically sound duplicate of the evidence (i.e., forensic image) that ensures the original evidence is not unintentionally modified, to use for data recovery and analysis processes.
• Provide a technical summary of findings in accordance with established reporting procedures.
• Ensure that the chain of custody is followed by all digital media acquired in accordance with the Federal Rules of Evidence.
• Recognize and accurately report forensic artifacts indicative of a particular operating system.
• Extract data using data carving techniques (e.g., Forensic Tool Kit [FTK], Foremost).
• Collect and analyze intrusion artifacts (e.g., source code, malware, and system configuration) and use discovered data to enable mitigation of potential cyber defense incidents within the enterprise.
• Create detections and automation to detect, contain, eradicate, and recover from security threats.
• Develop new and novel defense techniques to identify and stop advanced adversary tactics and techniques.
• Perform forensics on network, host, memory, and other artifacts originating from multiple operating systems, applications, or networks and extract IOCs and TTPs.
• Conduct proactive hunts through enterprise networks, endpoints, or datasets to detect malicious, suspicious, or risky activities that have evaded detection by existing tools.

Mid-Level Cyber Threat Hunter, Forensics Analyst

Business Development Rep

• Engage directly with customers to understand mission requirements, acquisition approaches, and evaluation criteria
• Shape solicitations through proactive engagement, RFI responses, white papers, and targeted capability briefings
• Leverage Cybervance’s cybersecurity, incident response, SOC operations, and digital forensics expertise to align solutions with agency needs
• Ensure proposals are compliant, compelling, and aligned with capture strategy; contribute to technical, management, pricing, and past performance sections
• Lead capture planning and execution for priority cybersecurity opportunities; develop and implement win strategies, value propositions, and discriminators
• Oversee price-to-win, teaming, and staffing strategies to ensure competitive positioning
• Identify, negotiate, and formalize teaming agreements with prime contractors, subcontractors, and JV partners; build capture coalitions
• Conduct competitor and market analysis, including Black Hat reviews; position Cybervance on relevant GWACs, IDIQs, and BPA vehicles
• Maintain and expand relationships with federal agencies including DHS, CISA, DOJ, CBP, FBI, and the Department of State; serve as a trusted advisor to government stakeholders

Mid-Level Cyber Threat Hunter, Forensics Analyst

Director, Business Development