Cyber Threat Intelligence Analyst

Booz Allen Hamilton•Huntsville, AL

3d•$61,900 - $141,000•Remote

About The Position

Work as a member of a threat intelligence team responsible for understanding how emerging cyber threats impact the client organization while conducting highly detail-oriented security threat analysis and working with clients to validate and characterize threats. Support incident detection, response operations, and signature development, and provide input on new detection strategies and remediation guidance. Form accurate and precise analysis and escalate it to appropriate teammates or internal teams for additional assistance or review. Provide intelligence context to support the fine-tuning of signatures.

Requirements

5+ years of experience with cybersecurity
3+ years of experience conducting threat research focused on nation-state, criminal, or malicious cyber activities
Experience with Splunk
Experience writing concise analytical products and assessments, including translating complex technical cyber events into a narrative format for technical and executive audiences
Experience with the technical capabilities and limitations of the internet and online technologies, including collaborative internet tools such as social networking sites, blogs, and microblogs, and internet mapping tools
Experience with computer network protocols and operations
Knowledge of cyber intrusion vectors, malware, networking, and monitoring
Knowledge of threat intelligence tradecraft, including structured analytic, contrarian, and imaginative analytic techniques
Top Secret clearance
Bachelor's degree

Nice To Haves

Experience with Sentinel
Experience with the intelligence community (IC) or national security-related areas
Experience with open-source and threat intelligence platforms, including Mandiant, CrowdStrike, VirusTotal, Shodan, and Domain tools
Experience using industry-standard digital forensics tools and procedures
Experience with computer programming languages, including PHP, Python, SQL, C++, Perl, or Java
Experience with SIEM and Endpoint tools, including Splunk, Defender, QRadar, and ArcSight
Experience with penetration testing
TS/SCI clearance with a polygraph
CEH and Security+ or CSA+ Certifications
GIAC Cyber Threat Intelligence (GCTI) Certification

Responsibilities

Conducting highly detail-oriented security threat analysis
Working with clients to validate and characterize threats
Support incident detection, response operations, and signature development
Provide input on new detection strategies and remediation guidance
Form accurate and precise analysis and escalate it to appropriate teammates or internal teams for additional assistance or review
Provide intelligence context to support the fine-tuning of signatures