Cyber Threat Intelligence (Fusion) Analyst - TS/SCI with Polygraph

General Dynamics Information Technology • Reston, VA

6d • Onsite

About The Position

The Cyber Threat Intelligence (Fusion) Analyst will identify potential cyber threats, determine levels of risk, and produce analytical reports for a variety of audiences. This role requires the ability to translate technical indicators into layperson’s terms for presentations to senior executives. Outstanding problem-solving skills are essential. When serious threats are identified, the analyst will collaborate with other areas of the security team to identify appropriate solutions. A passion for technology and the ability to rapidly learn new security solutions are important. Indicators of Compromise (IOCs) will be obtained through forensic analysis of digital information, Open-Source Intel (OSINT) review/monitoring, available tools (customer-provided and open source), and pivoting/researching previously reported IOCs. The role involves recommending adjustments to countermeasures, discovering adversary campaigns, anomalies, and inconsistencies in sensor and system logs, SIEMs, and other data to identify or rule out system compromises. The analyst will provide written analytic summaries and attack life cycle visualizations, participate in collaborative sessions with other CNDSPs and IC agencies, and cross-functional teams on malicious intrusions, attacks, or suspicious activities. Sharing emerging Cyber Threat Intel data is crucial for centrally coordinated, threat-informed, and prioritized vulnerability scoring and mitigation. The role includes analyzing and documenting malicious cyber actors' TTPs, providing recommendations and alignment to vulnerabilities, and assisting in the development of IOCs for active defensive countermeasures and passive detection signatures. Risk assessments and recommendations based on analysis of technologies, threats, intelligence, and vulnerabilities will be provided. The analyst will also recommend adjustments to prioritized enterprise-focused analysis based on immediate threats and collect analysis metrics and trending data to identify key trends and provide situational awareness.

Requirements

• Bachelor's Degree and 8+ years of relevant experience, or equivalent combinations of education, certifications, and experience.
• DoD Approved Baseline 8570/8140 IAT level II (Sec+, CySA+, CCNA-Security, CND) certification is required prior to start date.
• DoD Approved Baseline 8570/8140 CSSP Analyst (CEH, CySA+, Certified First Responder-CFR) certification is required prior to start date.
• Knowledge of standard network infrastructure.
• Knowledge of masquerading, certificates, and file hashing.
• Familiar with monitoring emerging threats through Tools, Techniques, and Procedures (TTPs) and how they relate to the MITRE ATT&CK framework.
• Ability to pivot on indicators.
• TS/SCI clearance and ability to obtain and maintain a Polygraph.
• US Citizenship Required.

Nice To Haves

• GIAC Cyber Threat Intelligence (GCTI) or equivalent (other GIAC certs or any cert under 8570/8140 CSSP Analyst) certification is required within first 120 days of employment.

Responsibilities

• Identify potential cyber threats, determine levels of risk, and produce analytical reports.
• Translate technical indicators into layperson’s terms for presentations to senior executives.
• Collaborate with other security team members to identify appropriate solutions for serious threats.
• Obtain Indicators of Compromise (IOCs) through forensic analysis, OSINT review/monitoring, and available tools.
• Recommend adjustments to countermeasures (enterprise or tactical) to account for threats.
• Discover adversary campaigns, anomalies, and inconsistencies in sensor and system logs, SIEMs, and other data.
• Investigate to identify or rule out system compromises.
• Provide written analytic summaries and attack life cycle visualizations.
• Participate in collaborative sessions with other CNDSPs, IC agencies, and cross-functional teams on malicious intrusions, attacks, or suspicious activities.
• Share emerging Cyber Threat Intel data to achieve centrally coordinated, threat-informed, and prioritized vulnerability scoring and mitigation methodology.
• Analyze and document malicious cyber actors' TTPs.
• Provide recommendations and alignment to vulnerabilities and applicability to the enterprise operational environment.
• Assist in the development of IOCs for active defensive countermeasures and passive detection signatures.
• Provide risk assessments and recommendations based on analysis of technologies, threats, intelligence, and vulnerabilities.
• Recommend adjustment of prioritized enterprise-focused analysis based on immediate threat identified.
• Collect analysis metrics and trending data, identify key trends, and provide situational awareness on these trends.
• Document and report the identification and sharing of newly identified IOCs.
• Work with team members and independently.

Benefits

• Variety of medical plan options, some with Health Savings Accounts
• Dental plan options
• Vision plan
• 401(k) plan offering the ability to contribute both pre and post-tax dollars up to the IRS annual limits and receive a company match
• Full flex work weeks where possible
• Variety of paid time off plans, including vacation, sick and personal time
• Holidays
• Paid parental leave
• Military leave
• Bereavement leave
• Jury duty leave
• Short and long-term disability benefits
• Life insurance
• Accidental death and dismemberment insurance
• Personal accident insurance
• Critical illness insurance
• Business travel and accident insurance

What This Job Offers

• Job Type: Full-time
• Career Level: Senior