ME00492-Cyber Threat Analyst

Momentum Engineering, Inc.•Annapolis Junction, MD

86d

About The Position

Seeking a Cyber Threat Analyst with subject matter expertise in industrial control systems and critical infrastructure to join our team The candidate will be focused on conducting continuous research on emerging threats and threat actor activity to identify and assess the capabilities and activities of cyber criminals and/ or foreign intelligence entities The candidate will work as part of a team that analyzes data and prioritizes vulnerabilities with the goal to prevent and eradicate threats to critical U.S. systems

Requirements

Must have active Top Secret/SCI clearance with NSA Full Scope Polygraph
Must have a Bachelor’s Degree in Computer Science, international relations, information security, or a related field
Seven (7) years’ experience working in the areas of intelligence, information security, network forensics or insider threat with focus on Industrial Control Systems/Supervisory Control and Data Acquisition (ICS/SCADA) systems
Subject matter expertise understanding the unique components, protocols, and architectures of ICS/SCADA systems
Ability to understand data in various formats to extract and enrich information to enhance its value
Experience working with development teams to articulate requirements/enhancements to capabilities and tools
Experience with XKS creating general queries, fingerprinting, and identifying atypical events
Experience with Elastic/Splunk/ or other Security Information and Event Management (SIEM) experience creating visualizations and dashboards
Understanding of TCP/IP communication protocols and packet flows based on IP traffic; analysis of Packet Capture (PCAP) traffic in Wireshark
Familiarity writing signatures in Zeek and/or Snort
5+ years of experience: Working within a cybersecurity mission environment using tools and capabilities to generate threat intelligence. This includes working with cybersecurity analyst teams in more than one mission space to perform data analysis with a deep understanding of adversary tradecraft
Creating log file analysis including creating threat intelligence reports that indicate findings, mitigations, and confidence
Performing network communications and traffic analysis as well as analysis across disparate data sets to discover and inform cyber operations

Nice To Haves

Master’s Degree is preferred but not required

Responsibilities

Independently leveraging Agency tools and capabilities to generate intelligence
Independently performing software engineering functions that directly align/integrate into the IC mission architecture and capabilities including understanding the overall design, data flow, interfaces, and other pertinent details
Generating threat intelligence reporting (information sharing and dissemination) performing data analysis, implementing best practices in knowledge management, and creating automated solutions in the IC mission environment
Performing analysis across disparate data sets to discover and inform mission operations
Performing advanced queries at scale including a diverse range of data sources (e.g. partner, IC, open source) to enhance/enrich reporting
Forming advanced analytics, network diagrams, and other forms of associated knowledge to further understanding of the system, network, environment, and adversary