Cyber Intelligence Analyst

Peraton•Linthicum, MD

2d•$135,000 - $216,000•Onsite

About The Position

Peraton is hiring a Cyber Intelligence Analyst for its Linthicum, Maryland office to support a Department of Defense customer and related U.S. Intelligence Community and interagency cyber-focused portfolios. The role applies intelligence analysis to monitor, assess, and report on cyberspace operations, capabilities, vulnerabilities, and threat actors that could affect DoD critical assets, the DoD Information Network (DoDIN), and Defense Industrial Base networks. The analyst researches and evaluates technical and all-source intelligence, including information about advanced persistent threat groups, malware, network operations, and cyber warfare tactics. The position assesses adversary capabilities and intent and the potential impact of cyber threats on operations and networks. It also involves evaluating large datasets, identifying information gaps, developing recommendations and threat profiles, maintaining analytical procedures, and collecting data using standard intelligence methods and business processes. The analyst produces intelligence and operational reports, papers, presentations, and briefing materials for senior U.S. government officials, and represents analytical teams in interagency and technical forums. The role uses established reporting systems such as Grapevine/RAD and CHROME, and calls for applying artificial intelligence to enhance research and reporting, particularly through automation. The analyst also mentors mid-level analysts and junior staff. The position requires an active TS/SCI clearance with polygraph eligibility. Peraton lists a typical salary range of $135,000–$216,000; compensation may also include overtime, shift differential, and a discretionary bonus depending on the position.

Requirements

Bachelor’s degree and 8+ years of experience, or a master’s degree and 6+ years of experience, or a Ph.D. and 3+ years of experience; an additional four years of relevant experience or specialized training may be considered instead of a bachelor’s degree.
Active TS/SCI clearance with polygraph eligibility.
Experience providing integrated cyber, financial, virtual-asset/virtual-currency, and business analysis using advanced analytics and data science in support of national security, criminal, cyber, and counterintelligence investigations and operations.
Proficiency with intelligence community and cyber threat intelligence research and production tools, such as Augury, Google Threat Intelligence, GrayNoise, Censys, DomainTools, and Shodan.
Experience with open-source intelligence tools such as DarkBlue and other managed attribution systems.
Experience using the MITRE ATT&CK framework for advanced threat analysis.
Demonstrated experience gathering, analyzing, correlating, or evaluating information from varied sources, including law enforcement databases, and supporting law enforcement/counterintelligence operations and/or cyberspace operations.
Knowledge of network and application protocols, cyber vulnerabilities and exploitation techniques, and cyber threat/adversary tactics, techniques, and procedures.
Proficiency in building extended cybersecurity analytics.
Proven experience briefing Senior Executive Service and General Officer/Flag Officer leadership.

Nice To Haves

A degree in Information Technology, Computer Science, Cybersecurity, Information Systems, Software Engineering, Mathematics, or Data Science is highly desired.
Graduate of the Joint Cyber Analysis Course (JCAC), or an advanced degree in Cybersecurity.
Experience in intelligence-driven defense and/or Cyber Kill Chain methodologies.
Certifications such as IAM Level II or III, Security+, CEH, CySA+, GCTI, or other SANS cybersecurity, incident response, or OSINT certifications.
Understanding of cloud security architecture and related cybersecurity operations and analysis, including incident response and management, forensic media analysis, malware analysis/reverse engineering, and cyber threat intelligence analysis.
Operational Technology experience.
Experience tracing virtual-currency transactions using blockchain analytical tools or explorers, including tools from Chainalysis, TRM Labs, or other digital-asset analysis providers.
Foreign-language experience in Mandarin Chinese, Korean, Russian, Persian Farsi, or Arabic; native-level proficiency is a plus.
Experience with Title 18 and Title 32 authorities.

Responsibilities

Monitor and analyze cyberspace operations and vulnerabilities, and report on potential threats to DoD assets.
Review information and large datasets from multiple sources, identify gaps, and recommend solutions to strengthen cybersecurity measures.
Develop intelligence and operational reports and briefing materials using established systems such as Grapevine/RAD and CHROME; brief senior officials and represent analytical teams in interagency and technical forums.
Mentor mid-level analysts and junior staff on analytical practices and methodologies.
Research and evaluate technical and all-source intelligence, particularly concerning advanced persistent threat groups, malware, network operations, and cyber warfare tactics.
Analyze cyber threat data from multiple sources to assess impacts on current operations and adversary capabilities and intent.
Prepare, maintain, and update assessments and cyber threat profiles based on classified and open-source information, including organizational Rosetta for threat actor activity.
Develop and maintain analytical procedures as requirements change, and use artificial intelligence to enhance intelligence research and reporting, with an emphasis on automation.
Collect data through standard intelligence methods and business processes.
Produce papers, presentations, recommendations, and findings for senior U.S. government intelligence and network operations officials.