Cyber Threat Intelligence Analyst

Booz Allen Hamilton • Huntsville, AL

1d

About The Position

As a Cyber Threat Intelligence Analyst, you know the key to detecting and deterring malicious activity is quality risk-based intel that maps to a tactical behavior. At Booz Allen, you can apply your expertise to investigate the most pressing cyber threats impacting the aerospace industry. This is your chance to take on the adversary’s perspective, identify their motivations, and recommend ways to harden systems, reduce their attack surface, and thwart malicious actors. You’ll work as a member of a threat intelligence team responsible for understanding how emerging cyber threats impact the client organization while conducting highly detail-oriented security threat analysis and collaborating with clients to validate and characterize threats. You will support incident detection, response operations, and signature development and provide input on new detection strategies and remediation guidance. You’ll form accurate and precise threat analysis and escalate it to appropriate teammates or internal teams for additional assistance or review. You will provide intelligence context to support cybersecurity operations, signature development and tuning, and cyber risk-based decisions. Cyber threats are evolving. Booz Allen is committed to creating an environment where you not only keep pace with the industry but propel it forward. With access to academic programs, certifications, and opportunities to use expert tradecraft, we’ll continuously invest in you so you can create the career you want as you grow. Join us. The world can’t wait.

Requirements

• 6+ years of experience with cybersecurity
• 4+ years of experience conducting threat research focused on nation-state, criminal, or malicious cyber activities
• Experience translating complex technical cyber events into a narrative format for technical and executive audiences
• Experience with the technical capabilities and limitations of the internet and online technologies, including collaborative internet tools such as social networking sites, blogs and microblogs, and internet mapping tools
• Experience with computer network protocols and operations and SIEM and Endpoint tools, including Splunk, Defender, SentinelOne, and BigFix
• Experience applying frameworks such as the Cyber Kill Chain, Diamond Model, and MITRE ATT&CK
• Knowledge of how to collect IOCs and utilize them to identify intrusions, intrusion vectors, malware, networking, monitoring, current and past malware, attack methodologies, adversaries, and incident response methodologies and technologies
• Ability to write concise analytical products and threat assessments
• Secret clearance
• Bachelor's degree

Nice To Haves

• Experience working with the intelligence community (IC) or national security related areas
• Experience with open source and threat intelligence platforms, including MISP, Mandiant, CrowdStrike, or Recorded Future
• Experience in intelligence collection, analysis, and creation of products
• Intermediate level industry-recognized Certification such as GCIA, GCIH, GCFA, GNFA, GCTI, or GREM Certification

Responsibilities

• Support incident detection
• Response operations
• Signature development
• Provide input on new detection strategies and remediation guidance
• Form accurate and precise threat analysis and escalate it to appropriate teammates or internal teams for additional assistance or review
• Provide intelligence context to support cybersecurity operations, signature development and tuning, and cyber risk-based decisions

Benefits

• Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care.
• Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values.
• Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen’s benefit programs.
• Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level