Cyber Threat Analyst

Peraton•Linthicum, MD

1d•$112,000 - $179,000•Onsite

About The Position

Peraton is hiring a Cyber Threat Analyst to support a Department of Defense customer as part of a collaborative team. The role contributes to national security through cyber investigations, digital forensics, threat analysis, and mission support. It involves conducting all-source cyber threat analysis and reporting, researching intelligence and related data, developing analytical threat models, and providing functional guidance to a threat studies team. The analyst prepares, submits, and presents reports and issue papers to customer representatives and may brief decision-makers and leaders. The position uses cybersecurity and intelligence expertise to investigate suspicious files, query and pivot on indicators, and analyze malware characteristics such as hashes, file size, names, and paths. The analyst may use tools including VirusTotal, Google Threat Intelligence, Recorded Future, Domain Tools, SIEM, IDS/IPS, forensic analysis tools, and Jira to obtain, analyze, and communicate cyber threat information. The role also requires knowledge of advanced threat analysis technology, cyber threat actors, APTs, TTPs, IOCs, the cyber kill chain, and the MITRE ATT&CK framework, as well as familiarity with Department of Defense and service-level intelligence organizations, collection methods, production resources, and responsibilities. The analyst supervises the handling of classified information and provides guidance and mentorship to less-senior analysts. This is a full-time, on-site position in the Baltimore metropolitan area, with attendance required Monday through Friday. An active/current Secret clearance is required; TS/SCI is preferred.

Requirements

Active/current Secret security clearance; TS/SCI is preferred.
Associate degree and 10+ years of experience, or bachelor's degree and 8+ years, or master's degree and 6+ years, or Ph.D. and 3 years of experience.
Four years of additional relevant experience or specialized training may be considered in lieu of a bachelor's degree.
Experience in cybersecurity analysis, incident response, or digital forensics.
Detailed knowledge of Department of Defense and service-level (Army, Navy, Air Force) intelligence communities, including collection methods, production resources, and responsibilities.
Knowledge of advanced persistent threats (APTs) and tactics, techniques, and procedures (TTPs).
Proficiency in cybersecurity tools and technologies such as VirusTotal, Domain Tools, SIEM, IDS/IPS, and forensic analysis tools.
Knowledge of operating systems, network protocols, cyber threat actors, the cyber kill chain, indicators of compromise (IOCs), and the MITRE ATT&CK framework.
Ability to supervise the handling of classified information.
Strong analytical and problem-solving skills, including the ability to interpret complex data and provide actionable insights.
Excellent written and verbal communication skills, including the ability to explain technical information and threat impacts to non-technical audiences and stakeholders.
Prior experience briefing information to decision-makers and leaders.
Ability to work effectively on a team and collaborate with stakeholders, including those in the DIB.
Full-time, on-site attendance Monday through Friday in the Baltimore metropolitan area.

Nice To Haves

TS/SCI security clearance.
Bachelor's or master's degree in Computer Science, Information Systems, Information Technology, Cybersecurity, Data Science, Mathematics, or Software Engineering.
Relevant certifications such as CYSA+, CISSP, CEH, or CISM.

Responsibilities

Conduct all-source cyber threat analysis and reporting in support of Federal Government intelligence requirements.
Research and analyze intelligence and related data in support of threat studies.
Contribute to the development of analytical threat models and provide functional guidance and direction to the threat studies team.
Use scanning tools to investigate suspicious files, query and pivot on indicators, and analyze malware characteristics.
Obtain, fuse, and analyze cyber threat intelligence using tools such as VirusTotal, Google Threat Intelligence, and Recorded Future.
Prepare, submit, and present reports and issue papers to customer representatives.
Brief technical information and threat impacts to decision-makers, leaders, stakeholders, and non-technical audiences.
Supervise the handling of classified information.
Provide leadership, guidance, direction, and mentorship to less-senior analysts.
Use Jira to track analysis tasks and communicate status.
Collaborate with team members and stakeholders, including those in the Defense Industrial Base (DIB).