Cyber Threat Intelligence (CTI) Analyst

Edgewater Federal Solutions•Bethesda, MD

13h

About The Position

Edgewater Federal Solutions is a privately held government contracting firm located near Frederick, MD. The company was founded in 2002 with the vision of being highly recognized and admired for supporting customer missions through employee empowerment, exceptional services, and timely delivery. Edgewater is ISO 9001, 20000-1, 27001 certified, appraised at CMMI Level 3 Maturity for Development and Services, and has been named in the Top Workplaces in the Greater Washington Area Small Companies from 2018-2023. Edgewater Federal Solutions is currently seeking a Cyber Threat Intelligence (CTI) Analyst to provide support to an Edgewater Federal government contract. Due to the nature of the contract and work, US Citizenship is a requirement.

Requirements

BS/BA degree (additional years of experience in cyber security reduce this educational requirement).
12 or more years work experience.
Sound cyber security knowledge foundation, to include sufficient understanding of networking and application layer protocols.
Knowledge of the cyber kill chain and/or diamond model.
The ability to handle stress and work well under pressure and ambiguity.
The ability to make decisions and resolve problems effectively - seek out information and data to evaluate, prioritize and formulate best solutions and practices.
The ability to multi-task, work independently and as part of a team, and deal with sudden shifts in project priorities.
Working knowledge of enterprise toolsets and platforms (e.g., M365 Suite, Azure Cloud, and/or AWS).
Working knowledge of SecOps platforms (e.g., Tenable).
Technical aptitude for effective participation in hunt, computer network defense, and incident response activities, to include ability to reconstruct events based on in-depth analysis of network, endpoint, and log data.
Experience tracking threat actors and their TTPs

Nice To Haves

One or more certifications in information security (such as GCIA, GCIH, CEH, CISSP, SSCP, Sec+, etc.)
Experience and effective participation in hunt, computer network defense, and incident response activities
Malware analysis skills and experience
Intelligence community experience

Responsibilities

Become an integral part of a diverse team.
Establish and maintain complete intelligence cycle operations to support enterprise cyber security, accounting for strategic, operational, and tactical intelligence needs.
Use open source, government-provided and commercially provided intelligence in support of cyber security.
Potentially attend classified briefings that may help inform intelligence efforts.
Develop and brief status updates to the Federal Team.
Research known adversarial Tactics, Techniques and Procedures (TTPs) to identify foundational components, isolate associated host or network events, and enable threat mitigation, detection, and response.
Produce comprehensive cyber security reports including sourced and summarized threat intelligence, threat hunt findings and limitations, and present recommendations to system owners, cyber defenders, and policy makers.
Disseminate timely Indicators of Compromise (IOCs) and warnings of cyber threat activity against the U.S. and NIH-owned and operated hosts and networks.
Identify and provide high quality sources of indicators of attack and compromise to the team for application to the sensor array.
Participate in hunt, computer network defense, and incident response activities.
Conduct stakeholder analysis, determine client's goals and objectives, and identify appropriate strategies to support the client's mission/vision.
Create an NIH Cyber Threat Profile and analysis.
Complete job/system-related training as required by NIH.