Cyber Threat Intelligence Analyst

Leidos • Ashburn, VA

235d

About The Position

The U.S. Department of Homeland Security (DHS), Customs and Border Protection (CBP) Security Operations Center (SOC) is a U.S. Government program responsible to prevent, identify, contain and eradicate cyber threats to CBP networks through monitoring, intrusion detection and protective security services to CBP information systems including local area networks/wide area networks (LAN/WAN), commercial internet connection, public facing services, wireless, mobile/cellular, various cloud environments, security devices, servers and workstations. The CBP SOC is responsible for the overall security of CBP Enterprise-wide information systems, and collects, investigates, and reports any suspected and confirmed security violations.

Requirements

• Must currently possess a Top Secret Clearance Eligibility with the ability to obtain a TS/SCI.
• BS in IT related field or higher and 8-12 years' experience in an information technology field.
• Minimum of 5 years of experience as a Tier II senior cyber security analyst.
• 5+ years of recent experience with host-based and network-based security monitoring solutions.
• 2 years recent experience with host-based and network-based security monitoring using cybersecurity capabilities.
• Experience developing scripts to support cyber threat detection.
• Ability to work independently with minimal direction.
• Must be a US Citizen.

Nice To Haves

• A minimum of five (5) years of hands-on experience with host-based and network-based security monitoring.
• Previous DOD, IC or Law Enforcement Intelligence or Counter Intelligence Training/Experience.
• Knowledge of Structured Analytic Techniques.
• Degree in Applied Intelligence or Advanced Degree in Cyber Security or related field.

Responsibilities

• Conduct cyber threat analysis, identifying mitigation and/or remediation courses of action.
• Develop actionable intelligence used to protect organizational IT assets.
• Trend cyber threat metrics for leadership situational awareness.
• Maintain a comprehensive understanding of the cyber threat landscape.
• Identify, track, and investigate high priority threat campaigns, malicious actors, APTs, emerging threats, etc.
• Provide support to the Security Operations Center during incident response and threat intelligence activities.
• Develop scripts to support cyber threat detection in various formats such as VB scripts, Python, C++, HTML, XML.
• Conduct trending and correlation of various cyber intelligence sources.
• Produce high quality technical and non-technical products, briefings, whitepapers, etc.
• Maintain situational awareness of emerging threats, zero days, vulnerabilities, and other threats against customer systems.

Benefits

• Competitive compensation.
• Health and Wellness programs.
• Life Protection.
• Paid Leave.
• Retirement.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Industry: Professional, Scientific, and Technical Services
• Education Level: Bachelor's degree