Cyber Intelligence Analyst

Peraton•Linthicum, MD

About The Position

Peraton is hiring a Senior Analyst to support the Department of War Cyber Crime Center (DC3) as a Cyber Intelligence Analyst. The role monitors, assesses, and reports on cyberspace operations, capabilities, vulnerabilities, and personalities that may threaten Department of War critical assets, the DoW Information Network, and Defense Industrial Base networks. It also supports U.S. Intelligence Community and interagency cyber-focused portfolios. The analyst reviews and evaluates large datasets from multiple sources, identifies gaps, and recommends solutions. They research and assess Advanced Persistent Threat groups, malware, network operations, cyber warfare tactics, and adversary capabilities and intent; determine potential impacts on DoW networks and operations; and develop cyber threat profiles using classified and open-source information. The role maintains analytic procedures and organizational threat-actor references, collects data using standard intelligence methods and business processes, and uses AI to enhance research and automate reporting. The analyst produces high-quality intelligence and operational reports, papers, recommendations, presentations, and briefing materials for senior U.S. government officials. They deliver briefings to senior officials, represent analytic teams in interagency and technical forums, and mentor mid-level analysts and junior staff. Reporting systems include Grapevine/RAD and CHROME.

Requirements

At least 8 years of experience with a bachelor's degree, 6 years with a master's degree, or 3 years with a Ph.D.; four years of experience may be accepted in lieu of a bachelor's degree.
Active TS/SCI clearance with eligibility for a polygraph.
Experience providing integrated cyber, financial, virtual asset/virtual currency, and business analysis using advanced analytics and data science to support national security, criminal, cyber, and counterintelligence investigations and operations.
Proficiency with Intelligence Community analytic tools and cyber threat intelligence research and production tools, such as Augury, Google Threat Intelligence, GrayNoise, Censys, Domain Tools, and Shodan.
Experience using open-source intelligence tools such as DarkBlue and other managed attribution systems.
Experience with the MITRE ATT&CK framework for advanced threat analysis.
Demonstrated experience gathering, analyzing, correlating, or evaluating information from varied sources, including law enforcement databases, and supporting law enforcement/counterintelligence operations and/or cyberspace operations.
Knowledge of network and application protocols, cyber vulnerabilities and exploitation techniques, and cyber threat/adversary methodologies (TTPs).
Proficiency in building extended cybersecurity analytics.
Proven experience briefing Senior Executive Service and General Officer/Flag Officer leadership.

Nice To Haves

A degree in cybersecurity, computer science, information technology, information systems, software engineering, or data science is highly desired.
Graduate of the Joint Cyber Analysis Course (JCAC), or an advanced degree in cybersecurity.
Experience in intelligence-driven defense and/or Cyber Kill Chain methodologies.
Certifications such as IAM Level II or III, Security+, CEH, CySA+, GCTI, or other SANS cybersecurity, incident response, and OSINT certifications.
Understanding of cloud security architecture and related cybersecurity operations and analysis, including incident response and management, forensic media analysis, malware analysis/reverse-engineering, and cyber threat intelligence analysis.
Operational Technology (OT) experience.
Experience tracing virtual currency transactions using blockchain analytical tools or explorers from Chainalysis, TRM Labs, or other digital asset analysis tool providers.
Foreign-language experience in Chinese Mandarin, Korean, Russian, Persian Farsi, or Arabic; native-level experience is a plus.
Experience with Title 18 and Title 32 authorities.

Responsibilities

Monitor and analyze cyberspace operations and vulnerabilities, and report on potential threats to Department of War assets.
Review and evaluate large datasets from multiple sources, identify information gaps, and recommend solutions.
Develop intelligence and operational reports and briefing materials using systems such as Grapevine/RAD and CHROME; brief senior officials and represent analytic teams in interagency and technical forums.
Mentor mid-level analysts and junior staff on best practices and methodologies.
Research and evaluate technical and all-source intelligence, particularly concerning APT groups, malware, network operations, and cyber warfare tactics.
Analyze cyber threat data from multiple sources to assess impacts on current operations and determine adversary capabilities and intent.
Develop detailed cyber threat assessments and profiles from classified and open-source information, and maintain and update organizational references for threat-actor activity.
Develop and maintain analytic procedures as requirements change; use AI to enhance intelligence research and reporting, with emphasis on automation.
Collect data using standard intelligence methods and business processes.
Produce high-quality papers, presentations, recommendations, and findings for senior U.S. government intelligence and network operations officials.