Cyber Threat Operations & Intelligence Analyst

Parsons Corporation•Annapolis Junction, MD

10d•$157,500 - $283,500

About The Position

Parsons is seeking a Threat Operations and Intelligence Cyber Analyst to serve as a subject matter expert with deep knowledge of threat areas of interest around the globe. The analyst will analyze, correlate, and operationalize threat intelligence in support of proactive defensive cyber activities. The role combines analytical skills, technical expertise, and an intelligence-community mission background, including communicating complex findings to diverse audiences. The analyst will collaborate with cyber analysts to identify persistent cyber threats and help prevent and eradicate threats to critical U.S. systems. This position is part of Parsons’ Federal Solutions team, which supports U.S. government missions in areas including defense, security, and intelligence.

Requirements

Active Top Secret SCI security clearance with polygraph.
Bachelor’s degree in computer science, information systems, network forensics, or another data analysis field.
At least 14 years of experience in intelligence, information security, network forensics, insider threat, or security operations.
Specific understanding of key global areas of interest that pose threats to U.S. critical systems, as well as in-depth understanding of Advanced Persistent Threats (APTs), cyber actor motives, and actions.
Experience with reporting and intelligence-community analyst knowledge resources.
Experience with Elastic, Splunk, or another Security Information and Event Management (SIEM) platform, including creating visualizations and dashboards.
Exceptional ability to analyze, correlate, and synthesize threat data from diverse sources.
Ability to work with development teams and communicate requirements or enhancements for capabilities and tools.
Experience performing log file analysis and creating threat intelligence reports that indicate findings, mitigations, and confidence.
Extensive experience using advanced analytics, network diagrams, and related knowledge to understand systems, networks, environments, and adversaries.
Experience working with intelligence-community mission cybersecurity analysts on adversary understanding and mission-specific TTP development.
Experience with XKS, including creating general queries, fingerprinting, and identifying atypical events.
Understanding of TCP/IP communication protocols and packet flows based on IP traffic, and experience analyzing PCAP traffic in Wireshark.
Familiarity with writing signatures in Zeek and/or Snort.

Responsibilities

Analyze, correlate, and operationalize threat intelligence to support proactive defensive cyber activities.
Identify and investigate persistent cyber threats to critical U.S. systems.
Analyze log files and produce threat intelligence reports describing findings, mitigations, and confidence.
Create visualizations and dashboards using SIEM platforms such as Elastic or Splunk.
Work with development teams to articulate requirements and enhancements for capabilities and tools.
Use advanced analytics, network diagrams, and related knowledge to understand systems, networks, environments, and adversaries.
Work with intelligence-community mission cybersecurity analysts to understand adversaries and develop mission-specific TTPs.
Use XKS to create general queries, fingerprint activity, and identify atypical events.
Analyze TCP/IP communication protocols, IP traffic packet flows, and PCAP traffic in Wireshark.
Write signatures in Zeek and/or Snort.