Cyber Threat Intelligence Analyst

Agile Defense • Arlington, VA

20h • $120,000 - $145,000 • Onsite

About The Position

Agile Defense is seeking a Cyber Threat Intelligence Analyst with experience related to Russia to evaluate advanced and emerging cyber threats targeting Federal Departments and Agencies and National Critical Functions. The analyst will produce all-source strategic cyber intelligence assessments using industry and government tools and classified and unclassified data sets. The role involves identifying, investigating, and pursuing significant cyber events and communicating findings to decision-makers through intelligence products while following intelligence tradecraft and methods. Employment is contingent on successfully completing a program-based background investigation. The position is on-site in Arlington, Virginia and requires an active Top Secret clearance to start.

Requirements

• Active Top Secret clearance; clearance must be held to start.
• Bachelor’s degree with at least 5 years of experience, master’s degree with at least 3 years of experience, or Ph.D. with 0 or more years of experience.
• Familiarity with DIA writing standards and applicable knowledge of ICD 203 and ICD 106 standards.
• Understanding of indicators of compromise and their use in cyber threat intelligence.
• Knowledge of how to use and implement the MITRE framework.
• Working knowledge of advanced persistent threats (APTs).
• Ability to use TTPs from an APT to leverage against potential targets.
• Background experience related to Russia.

Nice To Haves

• ICS/SCADA/OT experience.
• Experience working with ICS/SCADA/OT equipment, and/or certifications or education related to industrial control systems.
• Experience with Russian threats in the intelligence-community cybersecurity context.

Responsibilities

• Collect and analyze threat data from multiple sources, including open-source intelligence, the dark web, threat feeds, and internal logs.
• Identify threat actors and the tactics, techniques, and procedures used in cyberattacks.
• Assess organizational vulnerabilities and risks based on the current threat landscape.
• Produce intelligence reports for security teams and leadership to support decision-making.
• Identify, investigate, and pursue significant cyber events.
• Communicate findings to key decision-makers through a range of intelligence products while adhering to intelligence tradecraft and methods.
• Produce all-source strategic cyber intelligence assessments using industry and government tools and classified and unclassified data sets.

What This Job Offers

• Job Type: Full-time