Cyber Threat Intelligence (Fusion) Analyst - TS/SCI with Polygraph
About The Position
The successful applicant will be responsible for identifying potential cyber threats, determining risk levels, and producing analytical reports for various audiences, including senior executives. This role requires strong problem-solving skills, the ability to translate technical information into understandable terms, and a passion for technology with a rapid learning aptitude for new security solutions. The analyst will obtain Indicators of Compromise (IOCs) through forensic analysis, Open-Source Intelligence (OSINT) review, and available tools, then recommend adjustments to countermeasures. They will also discover adversary campaigns, analyze anomalies in logs and SIEMs, investigate potential compromises, and provide written summaries and attack lifecycle visualizations. Collaboration with other CNDSPs, IC agencies, and cross-functional teams is expected for discussing intrusions and sharing Cyber Threat Intel data. The role involves analyzing and documenting malicious cyber actors' TTPs, providing recommendations, and assisting in the development of IOCs for defensive countermeasures and detection signatures. Risk assessments and recommendations based on technology, threat, intelligence, and vulnerability analysis will be provided. The analyst will also collect analysis metrics, trending data, identify key trends, and provide situational awareness. Good written communication skills are necessary for documenting and reporting IOCs. Attention to detail and the ability to work both independently and with team members are essential.
Requirements
- Bachelor's Degree and 8+ years of relevant experience, or equivalent combinations of education, certifications, and experience.
- DoW Approved Baseline 8570/8140 IAT level II (Sec+, CySA+, CCNA-Security, CND) certification is required prior to start date.
- DoW Approved Baseline 8570/8140 CSSP Analyst (CEH, CySA+, Certified First Responder-CFR) certification is required prior to start date.
- GIAC Cyber Threat Intelligence (GCTI) or equivalent (other GIAC certs or any cert under 8570/8140 CSSP Analyst) certification is required within first 120 days of employment.
- TS/SCI clearance and ability to obtain and maintain a Polygraph.
- Knowledge of standard network infrastructure.
- Knowledge of masquerading, certificates, and file hashing.
- Familiar with monitoring emerging threats through Tools, Techniques, and Procedures (TTPs) and how they relate to the MITRE ATT&CK framework.
- Ability to pivot on indicators.
- US Citizenship Required.
Nice To Haves
- Cybersecurity
- Cyber Threat Intelligence
- MITRE ATT&CK Framework
- Open Source Intelligence Analysis
Responsibilities
- Identify potential cyber threats and determine levels of risk.
- Produce analytical reports for various audiences, including senior executives.
- Translate technical indicators into layperson’s terms for presentations.
- Work with the security team to identify appropriate solutions for serious threats.
- Obtain Indicators of Compromise (IOCs) through forensic analysis, OSINT review/monitoring, and available tools.
- Recommend adjustments to enterprise or tactical countermeasures.
- Discover adversary campaigns, anomalies, and inconsistencies in sensor and system logs, SIEMs, and other data.
- Investigate to identify or rule out system compromises.
- Provide written analytic summaries and attack life cycle visualizations.
- Participate in collaborative sessions with other CNDSPs and IC agencies and cross-functional teams on malicious intrusions, attacks, or suspicious activities.
- Share emerging Cyber Threat Intel data to achieve centrally coordinated, threat-informed, and prioritized vulnerability scoring and mitigation methodology.
- Analyze and document malicious cyber actors TTPs.
- Provide recommendations and alignment to vulnerabilities and applicability to the enterprise operational environment.
- Assist in the development of IOCs for active defensive countermeasures and passive detection signatures.
- Provide risk assessments and recommendations based on analysis of technologies, threats, intelligence, and vulnerabilities.
- Recommend adjustment of prioritized enterprise-focused analysis based on immediate threat identified.
- Collect analysis metrics and trending data.
- Identify key trends and provide situational awareness on these trends.
- Document and report the identification and sharing of newly identified IOCs.
Benefits
- Variety of medical plan options, some with Health Savings Accounts
- Dental plan options
- Vision plan
- 401(k) plan offering the ability to contribute both pre and post-tax dollars up to the IRS annual limits and receive a company match
- Full flex work weeks where possible
- Variety of paid time off plans, including vacation, sick and personal time
- Holidays
- Paid parental leave
- Military leave
- Bereavement leave
- Jury duty leave
- Short and long-term disability benefits
- Life insurance
- Accidental death and dismemberment insurance
- Personal accident insurance
- Critical illness insurance
- Business travel and accident insurance
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
