Cyber Threat Intelligence Analyst Subject Matter Expert

Booz Allen Hamilton • Arlington, VA

10d • $99,000 - $225,000

About The Position

As an Eastern Europe Subject Matter Expert Cyber Threat Intelligence Analyst at Booz Allen, you will investigate cyber threats affecting critical infrastructure and help identify adversary motivations, targets, and behaviors. You will oversee the collection, documentation, assessment, and analysis of cyber threat information, using tools and technologies such as Google Threat Intelligence and the MITRE ATT&CK Framework to enrich intelligence. You will conduct strategic assessments of systems and networks and provide tactical analysis and recommendations for defensive operations. The role includes discovering and correlating timely threat intelligence, assessing actual risk, leading incident analysis and adversarial research, and producing finished intelligence products for policy makers, cyber operators, and mission-area leadership.

Booz Allen describes opportunities for continued professional growth through academic programs, certifications, and the use of expert tradecraft. The position requires TS/SCI clearance and extensive cybersecurity or cyber threat intelligence experience, with qualifying experience dependent on education level.

Requirements

• Experience with Eastern Europe geopolitical and cyber threat intelligence.
• Experience with cyber threat intelligence analysis principles in a government or commercial environment.
• Experience creating and presenting succinct briefings, presentations, and reports to technical and executive leadership.
• Knowledge of information security and information technology threats, attacks, and vulnerabilities in a cybersecurity context.
• Knowledge of Eastern Europe-related cyber adversaries and their techniques, tactics, and procedures (TTP).
• Ability to convert raw cyber data into actionable intelligence in written narrative and tactical data formats, following intelligence analysis tradecraft standards.
• Ability to work independently with minimal supervision.
• Active TS/SCI clearance is required; applicants are subject to a security investigation and must meet eligibility requirements for access to classified information.
• One of the following education and experience combinations: high school diploma or GED and 18 or more years of cybersecurity or cyber threat intelligence experience; bachelor's degree and 14 or more years of such experience; or master's degree and 12 or more years of such experience.

Nice To Haves

• Experience with computer network protocols and operations.
• Experience with the Intelligence Community and its intelligence analysis standards.
• Knowledge of advanced persistent threats and campaigns.
• Knowledge of analytic threat models, including MITRE ATT&CK, Pyramid of Pain, Diamond Model, and Cyber Kill Chain.
• Ability to perform queries on indicators of compromise and characteristics, including MD5, SHA-1, IP addresses, file size, file name, and file paths.
• Ability to conduct classified and unclassified research using research tools.
• Excellent verbal and written communication, problem-solving, and analytical skills.
• Net+, Security+, CEH, CCNA, or SANS certifications.

Responsibilities

• Oversee the collection, documentation, assessment, and analysis of cyber threat information.
• Use tools and technologies such as Google Threat Intelligence and the MITRE ATT&CK Framework to enrich intelligence.
• Conduct strategic assessments of systems and networks.
• Provide tactical analysis and influential recommendations for defensive operations.
• Discover and correlate timely threat intelligence and determine what represents a real risk.
• Lead incident analysis and adversarial research.
• Produce finished intelligence products to inform policy makers, cyber operators, and mission-area leadership.
• Create and present succinct briefings, presentations, and reports to technical and executive leadership, conveying analysis, threat trends, impacts to targets, defensive strategies, and prioritization.
• Convert raw cyber data into actionable intelligence in written narrative and tactical data formats while following intelligence analysis tradecraft standards.

Benefits

• Health, life, and disability benefits.
• Financial and retirement benefits.
• Paid leave.
• Professional development.
• Tuition assistance.
• Work-life programs.
• Dependent care.
• Recognition awards for exceptional performance and demonstration of company values.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: High school or GED