Cyber Intelligence Analyst

Peraton•Linthicum, MD

2d•$135,000 - $216,000

About The Position

Peraton is hiring a Senior Analyst to support the Department of War Cyber Crime Center (DC3) as a Cyber Intelligence Analyst. The role applies intelligence analysis to monitor, assess, and report on cyberspace operations, capabilities, vulnerabilities, and actors that may threaten Department of War critical assets, DoWIN, and Defense Industrial Base networks. It also supports U.S. Intelligence Community and interagency cyber-focused portfolios. The analyst researches and evaluates technical and all-source intelligence, with emphasis on advanced persistent threat groups, malware, network operations, and cyber warfare tactics. The role assesses adversary capabilities and intent and the potential impact of threats on Department of War networks. It develops cyber threat profiles and analytic procedures; collects and evaluates information from multiple sources; and prepares reports, presentations, recommendations, and briefings for senior U.S. government officials. The analyst also represents analytic teams in interagency and technical forums and mentors mid-level analysts and junior staff.

Requirements

At least 8 years of experience with a BS/BA, 6 years with an MS/MA, or 3 years with a Ph.D.; four years of experience may be accepted in lieu of a bachelor’s degree.
Active TS/SCI with Poly eligibility.
Experience providing integrated cyber, financial, virtual asset/virtual currency, and business analysis using advanced analytics and data science to support national security, criminal, cyber, and counterintelligence investigations and operations.
Proficiency with Intelligence Community analytic and Cyber Threat Intelligence research and production tools, such as Augury, Google Threat Intelligence, GrayNoise, Censys, Domain Tools, and Shodan.
Experience using open-source intelligence tools such as DarkBlue and other managed attribution systems.
Experience with the MITRE ATT&CK framework for advanced threat analysis.
Demonstrated experience gathering, analyzing, correlating, or evaluating information from varied sources, including law enforcement databases, and supporting Law Enforcement/Counterintelligence operations and/or Cyberspace Operations.
Knowledge of network and application protocols, cyber vulnerabilities and exploitation techniques, and cyber threat/adversary methodologies (TTPs).
Proficiency in building extended cybersecurity analytics.
Proven experience briefing Senior Executive Service and General Officer/Flag Officer leadership.

Nice To Haves

A degree in Cybersecurity, Computer Science, Information Technology, Information Systems, Software Engineering, or Data Science is highly desired.
Graduate of the Joint Cyber Analysis Course (JCAC), or an advanced degree in Cybersecurity.
Experience in intelligence-driven defense and/or Cyber–Kill Chain methodologies.
Certifications such as IAM Level II or III, Security+, CEH, CySA+, GCTI, or other SANS cybersecurity, incident response, and OSINT certifications.
Understanding of Cloud Security Architecture and related cybersecurity operations and analysis, including incident response and management, forensic media analysis, malware analysis/reverse-engineering, and cyber threat intelligence analysis.
Operational Technology experience.
Experience tracing virtual currency transactions with blockchain analytical tools or explorers from Chainalysis, TRM Labs, or other digital asset analysis providers.
Foreign-language experience in Chinese Mandarin, Korean, Russian, Persian Farsi, or Arabic; native-level proficiency is a plus.
Experience with Title 18 and Title 32 authorities.

Responsibilities

Monitor and analyze cyberspace operations and vulnerabilities, and report on potential threats to Department of War assets.
Review and evaluate large datasets from multiple sources, identify gaps, and recommend solutions to strengthen cybersecurity measures.
Develop intelligence and operational reports and briefing materials using reporting systems such as Grapevine/RAD and CHROME; deliver presentations to senior officials and represent analytic teams in interagency and technical forums.
Mentor mid-level analysts and junior staff on best practices and methodologies.
Research and evaluate technical and all-source intelligence, including information about advanced persistent threat groups, malware, network operations, and cyber warfare tactics.
Analyze cyber threat data from multiple sources to assess impacts on current operations and determine adversary capabilities and intent.
Develop detailed assessments and cyber threat profiles based on classified and open-source information, and maintain and update organizational Rosetta for threat actor activity.
Develop and maintain analytic procedures to adapt to changing requirements; use AI to enhance intelligence research and reporting, with emphasis on automation.
Collect data using standard intelligence methods and business processes.
Produce high-quality papers, presentations, recommendations, and findings for senior U.S. government intelligence and network operations officials.