Cyber Threat Intelligence Analyst (Intermediate-Fort Bragg, NC)

Akira Technologies•Fort Bragg, NC

4d•Onsite

About The Position

Akira is seeking a Cyber Threat Intelligence (CTI) Analyst to support the U.S. Army Reserve Command (USARC) in cyberspace operations supporting Army and joint requirements. The CTI Analyst will support the CTI function through open-source and classified intelligence collection, analysis, threat hunting, and signature development to inform Blue Team detection priorities and defensive cyberspace operations (DCO) assessment activities. The analyst will produce finished intelligence products and contribute to the signature-development pipeline under the direction of the CTI Lead. This is an onsite position at Fort Bragg, NC supporting a mission-focused U.S. Army Reserve Command. At minimum, Secret clearance is required; TS/SCI where required by assigned work role or supported network.

Requirements

DoD Manual 8140.03 qualification for DCWF Work Role 171, Cyber Threat Intelligence Analyst, Intermediate.
Active Secret security clearance at a minimum; TS/SCI eligibility/access where required by the assigned work role or supported network.
Demonstrated experience with intelligence-analysis tradecraft and OSINT collection methodologies.
Experience analyzing and mapping adversary tactics, techniques, and procedures (TTPs), including familiarity with the MITRE ATT&CK framework.
Demonstrated proficiency with signature development and detection-content validation, including YARA, Snort, and/or Suricata.
Experience analyzing cyber threat information, indicators, vulnerabilities, adversary activity, or related cybersecurity intelligence.
Ability to correlate intelligence reporting with network, sensor, incident, and other cybersecurity data.
Strong analytical, research, technical writing, and communication skills.
Ability to work effectively in a classified, mission-focused operational environment.
Ability to work onsite at Fort Bragg, NC and support operational requirements.

Nice To Haves

Experience producing finished intelligence products for military, DoD, Government, or enterprise cybersecurity consumers.
Experience supporting Army, Army Reserve, ARCYBER, or joint cyberspace operations.
Experience supporting a Security Operations Center (SOC), Blue Team, Defensive Cyberspace Operations (DCO), or Cyber Threat Intelligence mission.
Experience with Elastic Security, SIEM platforms, network security monitoring, endpoint detection and response (EDR), or related defensive cyber technologies.
Experience conducting malware analysis or reverse engineering in an isolated laboratory environment.
Experience developing and validating detection logic, IOCs, YARA rules, network signatures, or host-based detection policies.
Familiarity with cyber threat intelligence standards, intelligence-sharing communities, and Government cyber threat reporting processes.
Relevant cybersecurity, intelligence, or CTI certifications are a plus.

Responsibilities

Collect, aggregate, and analyze Open-Source Intelligence (OSINT), commercial threat feeds, Information Sharing and Analysis Center (ISAC) reporting, community intelligence reporting, and Government-Furnished Intelligence (GFI) to identify emerging threats relevant to supported networks.
Research commercial exploits, zero-day vulnerabilities, adversary tactics, techniques, and procedures (TTPs), and other threats requiring DCO action.
Integrate threat intelligence findings into supported environments to inform detection priorities and defensive cyber operations.
Develop, test, and recommend host-based and network-based detection signatures, including YARA, Snort, Suricata, Elastic detection logic, and custom host-based policies, based on identified adversary tradecraft.
Coordinate signature submissions with the applicable U.S. Army Cyber Command (ARCYBER) signature working group portal to support standardization and dissemination.
Correlate internal sensor data and incident reports with classified and open-source threat reporting to identify campaign patterns, recurring activity, and persistent adversary behavior.
Conduct hypothesis-driven and indicator-based threat-hunting missions in coordination with Blue Team Tier 3 analysts.
Provide tactical DCO integration support when directed, incorporating tactical network sensor events and signature analysis into supported Regional Cyber Center (RCC) DCO processes.
Support development and maintenance of the DCO test laboratory using Government-approved infrastructure and a commercially leased connection isolated from NIPRNet for malware analysis and OSINT collection.
Produce Threat Intelligence Reports (TIRs), Indicators of Compromise (IOC) packages, Requests for Information (RFIs), trend analyses, and other finished intelligence products under the direction of the CTI Lead.
Validate proposed detection signatures for appropriate syntax, functionality, and minimal false positives prior to deployment.
Conduct signature development, malware analysis, and detection-content testing exclusively on appropriately isolated networks and environments.
Support monthly DCO-specific internal training sessions, including maintenance of the Program of Instruction (POI), attendee records, and After-Action Reports (AARs).
Participate in applicable cybersecurity conferences, intelligence events, and training activities as directed.
Contribute to post-event reports and incorporate relevant findings into CTI processes and operational products.
Maintain accurate documentation of intelligence collection, analysis, signature development, testing, and operational activities.
Perform other CTI and DCO support duties as required by the mission.

Benefits

Multiple options for medical plans (some with Health Savings Account)
Dental plans
Vision coverage
401(k) plan with employer match
Paid time off, including vacation and sick time
Holidays
Paid parental leave
Military leave
Bereavement leave
Jury duty leave
Short and long-term disability benefits
Life insurance
Accidental death and dismemberment insurance
Critical illness insurance
Tuition, training, and certification reimbursement for professional development and career advancement