Cyber Data Analyst

Booz Allen Hamilton•Chantilly, VA

5d•Remote

About The Position

As a cyber data analyst, you love diving into data and turning it into meaningful insights. With the abundance of structured and unstructured data, you understand the importance of transforming complex data sets into useful information to solve challenges. As a cyber data analyst at Booz Allen, you can use your skills and experience to support a mission and use data for good. We need a data expert like you to bring your expertise to uncover the critical data that advances criminal and national security investigations. As a client-facing cyber data analyst on our Civilian Agencies team, you’ll work closely with your clients to understand their questions and needs and then dig into their data-rich environments to find the pieces of their information puzzle. Not only will you provide a deep understanding of their data, you’ll also advise your client on what the information means and how it can be used to make an impact on cyber investigations and operations. Work with us to drive national security decisions through data insights. Join us. The world can’t wait.

Requirements

5+ years of experience processing, evaluating, and analyzing computer artifacts and network communications to prepare analytical reports, data summaries, and responses to inquiries
Experience drafting clear, concise reports on cyber intrusion and end-to-end kill chain analyses to inform client collection, monitoring, and mitigation of threats
Experience recovering and analyzing host-based artifacts such as registry hives, event and system logs, program execution records, and user command line activity
Experience analyzing packet capture and NetFlow collections to uncover malicious actor activity
Experience providing regular operational updates to managers and client leadership highlighting significant mission support activity and progress
Ability to link and correlate digital artifacts, such as IP addresses, Uniform Resource Locators (URLs), or malicious software, from single or multiple sources with client holdings and datasets to inform and develop threat attribution
Active TS/SCI clearance; willingness to take a polygraph exam
Bachelor’s degree

Nice To Haves

Experience with data aggregation and ETL tools, such as Splunk or Cribl
Experience with network traffic analysis tools, such as Wireshark, Zeek, and Arkime
Experience with scripting languages, such as Python, PowerShell, or shell scripting

Responsibilities

Processing, evaluating, and analyzing computer artifacts and network communications to prepare analytical reports, data summaries, and responses to inquiries.
Drafting clear, concise reports on cyber intrusion and end-to-end kill chain analyses to inform client collection, monitoring, and mitigation of threats.
Recovering and analyzing host-based artifacts such as registry hives, event and system logs, program execution records, and user command line activity.
Analyzing packet capture and NetFlow collections to uncover malicious actor activity.
Providing regular operational updates to managers and client leadership highlighting significant mission support activity and progress.
Linking and correlating digital artifacts, such as IP addresses, Uniform Resource Locators (URLs), or malicious software, from single or multiple sources with client holdings and datasets to inform and develop threat attribution.