Cyber Threat Hunting Analyst - Cyber Security & TSOC

JOB DESCRIPTION FirstEnergy at a GlanceWe are a forward-thinking electric utility powered by a diverse team of employees committed to making customers' lives brighter, the environment better and our communities stronger.FirstEnergy (NYSE: FE) is dedicated to safety, reliability, and operational excellence. Headquartered in Akron, Ohio, FirstEnergy includes one of the nation's largest investor-owned electric systems, more than 24,500 miles of transmission lines that connect the Midwest and Mid-Atlantic regions, and a regulated generating fleet with a total capacity of 3,780 megawatts.About the OpportunityThis position's base reporting location is in Akron, Ohio, and reports to the Supervisor of Threat Hunting.This position's base reporting location is in Akron, Ohio, and reports to the Supervisor of Threat Hunting.The Cybersecurity Threat Hunter will contribute to incident response efforts, analyze threat actors' tactics, techniques, and procedures (TTPs), and develop actionable reports for stakeholders.

They will leverage expertise in cutting-edge technologies and ethical artificial intelligence to maintain the organization's robust cybersecurity posture. A key focus will be on researching and developing innovative tools, techniques, and processes to strengthen the security ecosystemThis role requires the ability to research attackers' TTPs and build custom profiles and content based on their behaviors, enabling enhanced detection and response capabilities.

The Threat Hunter will design custom attacks and security emulations to test and improve organizational defenses while also training staff to bolster overall security readiness. Maintaining a high level of technical knowledge through continuous learning, networking, and professional development is integral to this roleAdditionally, this position involves creating and refining SIEM, EDR, and SOAR content, analyzing forensic artifacts to uncover security gaps, and driving collaboration across cross-functional teams to deliver solutions for complex cybersecurity challenges.

Strong communication skills, a commitment to FirstEnergy's core values, and an ability to translate technical findings into actionable strategies are essential for success in this role.Responsibilities Include• Proactively search for and identify vulnerabilities in the organization's security systems• Collaborate with the SOC s to convert intelligence into actionable defensive capabilities• Evaluate intelligence sources and feeds for relevance, accuracy, timeliness, and operational value to reduce unnecessary alerting and noise• Analyze threat actors' TTPs (Tactics, Techniques, and Procedures) to provide detailed technical reports with a high level of attention to detail for stakeholders, as well as assist in developing related content• Analyze threat reporting from commercial intelligence platforms, OSINT, government advisories, ISACs, and trusted industry partner• Research and enrich IOCs, including domains, IP addresses, URLs, file hashes, certificates, and adversary infrastructure• Monitor geopolitical events, vulnerabilities, cybercriminal activity, and nation-state campaigns for potential organizational impact• Act as a cybersecurity subject matter expert (SME) to support the SOC, providing consultancy and advice on the delivery of security solutions• Maintain a high level of expertise in log analysis, malware reverse engineering, memory forensics, network and endpoint telemetry, and behavioral analytics• Assist with incident response for operational and cybersecurity related issues• Identify process improvements to further advance security operations• Improve detections in SIEM, EDR, and SOAR platforms by fine-tuning existing content and developing new custom rules and alerts• Re-evaluate current controls and make recommendations for best practices based on new information received in an ever-evolving threat landscape• Research new capabilities from both open and closed sourced technologies to find o