Cyber Threat Intelligence Engineer III

CACI International•St. Louis, MO

1d•$75,200 - $158,100

About The Position

As a Cyber Threat Intelligence Analyst, the employee provides cyber threat intelligence services to support the collection, fusion, analysis, creation, and distribution of intelligence from the Intelligence Community, government entities, commercial feeds, open sources, and other partners. The goal is to maintain awareness of the threat environment, enhance NGA’s security posture, and protect critical assets. The role develops and disseminates reports to internal and external stakeholders based on events, alerts, and incidents on NGA systems and networks. The position conducts research and analysis on emerging threats, monitors the global threat landscape, collaborates with stakeholders, and develops threat profiles, models, and reports. It also supports incident response and other cybersecurity initiatives through actionable intelligence and authorized dissemination of cyber intelligence products. The role requires documenting analytical work in the authorized ticketing system and contributing to routine CSOC reporting.

Requirements

Experience with Cyber Threat Intelligence.
Ability to work independently with minimal supervision.
Proactive approach to assigned duties.
Excellent communication skills.
Ability to work as a team member and facilitate a collaborative work environment.
DOD 8570.01 IAT II certification.
Willingness to obtain a CSSP Analyst certification within 120 days of joining the team.
Minimum TS/SCI clearance.

Nice To Haves

Master’s degree.
Security Operations Center (SOC) experience.

Responsibilities

Collect and analyze commercial and government cyber intelligence reports to provide actionable intelligence supporting incident response, vulnerability management, and other cybersecurity initiatives.
Monitor and assess the global threat landscape, including threat actors, malware, and hacking techniques that may affect NGA systems and networks.
Collaborate with internal and external stakeholders to gather and share relevant threat intelligence.
Develop and maintain threat profiles and reports to enhance detection and response capabilities.
Update and refine threat intelligence processes and methodologies.
Provide regular and ad hoc reports, briefs, documents, diagrams, and other products to the Government and other Contract Services so stakeholders understand cybersecurity threats and risks to NGA.
Identify and assess the relevance and effectiveness of signatures and indicators of compromise based on intelligence.
Develop, review, and, when authorized by the Government, disseminate NGA CSOC cyber intelligence products to NGA, DoD, and IC partners, including threat intelligence reports, significant cyber activity reports, and incident investigation reports.
Analyze patterns of behavior to identify adversary intent and provide analysis in documents, briefings, or other products.
Develop comprehensive threat models of adversary activity and provide analysis in formal reports, briefings, or other products.
Coordinate with NGA entities, including Cyber Counterintelligence, Insider Threat, and Red/Blue Team, on adversary profiling and threat modeling.
Document work in the authorized ticketing system with enough detail for the Government and other services to reconstruct the analysis process.
Provide input to the daily CSOC Significant Activity Report, daily CSOC Operations Update, and Weekly CSOC Status Report.