Cyber Threat Intelligence Analyst Subject Matter Expert

Booz Allen Hamilton•Arlington, VA

9d•$99,000 - $225,000•Onsite

About The Position

As an Eastern Europe Subject Matter Expert Cyber Threat Intelligence Analyst, you will investigate cyber threats impacting critical infrastructure and produce risk-based intelligence that supports defensive operations. You will oversee the collection, documentation, assessment, and analysis of cyber threat information, using tools and frameworks such as Google Threat Intelligence and MITRE ATT&CK. The role includes conducting strategic assessments of systems and networks, providing tactical analysis and recommendations, and correlating threat intelligence to identify real risks. You will lead incident analysis and adversarial research and produce finished intelligence products for policymakers, cyber operators, and mission-area leadership. The position is based in Arlington, Virginia, and is not listed as remote. A TS/SCI clearance is required.

Requirements

Experience with Eastern Europe geopolitical and cyber threat intelligence.
Experience with cyber threat intelligence analysis principles in a government or commercial environment.
Experience creating and presenting succinct briefings, presentations, and reports to technical and executive leadership.
Knowledge of information security and information technology threats, attacks, and vulnerabilities in a cybersecurity context.
Knowledge of Eastern Europe-related cyber adversaries and their tactics, techniques, and procedures (TTPs).
Ability to convert raw cyber data into actionable intelligence in written narrative and tactical data formats, following intelligence analysis tradecraft standards.
Ability to work independently with minimal supervision.
TS/SCI clearance.
One of the following education and experience combinations: high school diploma or GED and 18 or more years of cybersecurity or cyber threat intelligence experience; bachelor's degree and 14 or more years of relevant experience; or master's degree and 12 or more years of relevant experience.

Nice To Haves

Experience with computer network protocols and operations.
Experience with the Intelligence Community and its intelligence analysis standards.
Knowledge of advanced persistent threats and campaigns.
Knowledge of analytic threat models, including MITRE ATT&CK, Pyramid of Pain, Diamond Model, and Cyber Kill Chain.
Ability to query indicators of compromise and characteristics, including MD5, SHA-1, IP addresses, file size, file name, and file paths.
Ability to conduct classified and unclassified research using research tools.
Excellent verbal and written communication, problem-solving, and analytical skills.
Net+, Security+, CEH, CCNA, or SANS certifications.

Responsibilities

Oversee the collection, documentation, assessment, and analysis of cyber threat information.
Conduct strategic assessments of systems and networks.
Provide tactical analysis and recommendations for defensive operations.
Discover and correlate timely threat intelligence and determine what constitutes a real risk.
Lead incident analysis and adversarial research.
Create finished intelligence products to inform policymakers, cyber operators, and mission-area leadership.
Create and present briefings, presentations, and reports on analysis, threat trends, target impacts, defensive strategies, and prioritization.