Cyber Intelligence Analyst

Peraton•Linthicum, MD

8h•Onsite

About The Position

Peraton is seeking a Cyber Intelligence Analyst to support a Department of Defense customer from its Linthicum, Maryland office. The role supports federal government missions by monitoring, assessing, and reporting on cyberspace operations, capabilities, vulnerabilities, and individuals that may threaten DoD critical assets, the DoW Information Network, Defense Industrial Base networks, and U.S. Intelligence Community and interagency cyber portfolios. The analyst reviews and evaluates large datasets from diverse sources, identifies gaps, recommends solutions, and develops intelligence products for senior government officials. The successful candidate will research and analyze advanced persistent threat groups, assess and attribute malware, analyze cyber warfare tactics, evaluate effects on DoW networks, develop threat profiles, maintain analytic procedures, and collect intelligence data. The role also includes mentoring analysts, producing reports and presentations, briefing senior leaders, and representing analytic teams in interagency and technical forums. Candidates should be proficient in using artificial intelligence to support intelligence research and improve reporting, particularly through automation.

Requirements

Bachelor’s degree and 8 or more years of experience, or a master’s degree and 6 or more years of experience, or a Ph.D. and 3 or more years of experience. An additional 4 years of relevant experience or specialized training may be considered in lieu of a bachelor’s degree.
Active TS/SCI clearance with eligibility for a polygraph.
Experience providing integrated cyber, financial, virtual asset/virtual currency, and business analysis using advanced analytics and data science to support national security, criminal, cyber, and counterintelligence investigations and operations.
Proficiency with Intelligence Community analytic tools and cyber threat intelligence research and production tools, such as Augury, Google Threat Intelligence, GrayNoise, Censys, Domain Tools, and Shodan.
Experience using open-source intelligence tools such as DarkBlue and other managed attribution systems.
Experience using the MITRE ATT&CK framework for advanced threat analysis.
Demonstrated ability to gather, analyze, correlate, or evaluate information from diverse sources, including law enforcement databases, and to support law enforcement/counterintelligence operations and/or cyberspace operations.
Knowledge of network and application protocols, cyber vulnerabilities and exploitation techniques, and cyber threat/adversary tactics, techniques, and procedures.
Proficiency in building extended cybersecurity analytics.
Experience briefing Senior Executive Service and General Officer/Flag Officer leadership.

Nice To Haves

A degree in Information Technology, Computer Science, Cybersecurity, Information Systems, Software Engineering, Mathematics, or Data Science.
Graduate of the Joint Cyber Analysis Course (JCAC), or an advanced degree in Cybersecurity.
Experience in intelligence-driven defense and/or Cyber Kill Chain methodologies.
Certifications such as IAM Level II or III, Security+, CEH, CySA+, GCTI, or other SANS cybersecurity, incident response, and OSINT certifications.
Understanding of cloud security architecture and related cybersecurity operations and analysis, including incident response and management, forensic media analysis, malware analysis/reverse engineering, and cyber threat intelligence analysis.
Operational Technology experience.
Experience tracing virtual currency transactions using blockchain analytical tools or explorers from Chainalysis, TRM Labs, or other digital asset analysis tool providers.
Foreign-language experience in Chinese Mandarin, Korean, Russian, Persian Farsi, or Arabic; native-level experience is a plus.
Experience with Title 18 and Title 32 authorities.

Responsibilities

Monitor and analyze cyberspace operations and vulnerabilities, and prepare assessments and reports on potential threats to DoD assets.
Review and evaluate large datasets from varied sources, identify gaps, and recommend improvements to cybersecurity measures.
Develop intelligence and operational reports and briefing materials using reporting systems such as Grapevine/RAD and CHROME; brief senior officials and represent analytic teams in interagency and technical forums.
Mentor mid-level analysts and junior staff on best practices and methodologies.
Research and evaluate technical and all-source intelligence, particularly concerning APT groups, malware, network operations, and cyber warfare tactics.
Analyze cyber threat data from multiple sources to assess effects on current operations and adversary capabilities and intent.
Prepare cyber threat profiles and assessments using classified and open-source information, and develop, maintain, and update organizational Rosetta for threat actor activity.
Develop and maintain analytic procedures to meet changing requirements and support effective operations.
Use artificial intelligence to enhance intelligence research and enrich reporting, with an emphasis on automation.
Collect data using standard intelligence methods and business processes.
Produce papers, presentations, recommendations, and findings for senior U.S. government intelligence and network operations officials.