CTI Cybersecurity Analyst - Sr

TMC Technologies•Huntsville, AL

About The Position

TMC Technologies is in search of a senior level Cybersecurity Analyst to join the FBI's ESOC Cyber Threat Intelligence (CTI) Team. The CTI Team is responsible for monitoring and analyzing external cyber threat data to provide insights and actionable intelligence about potential cyber threats. The candidate must be a US citizen and possess a minimum of an active Top Secret clearance with Sensitive Compartmented Information (SCI) eligibility to start due to federal contract requirements.

Requirements

US Citizenship and active Top Secret clearance with SCI eligibility required
Minimum of 8 years of relevant experience required
Experience with identifying indicators of compromise (IOCs), tactics, techniques, and procedures (TTPs) used by attackers required
Expertise in established cyber threat intelligence frameworks, such as MITRE ATT&CK required
Splunk Enterprise Security experience required
Bachelor’s Degree required

Nice To Haves

Experience with open-source intelligence (OSINT) collection methods and tools preferred
Preferred certifications include: GIAC Cyber Threat Intelligence (GCTI)

Responsibilities

Responsible for monitoring computer networks for security issues.
Investigating security breaches and other cybersecurity incidents.
Document security breaches and assess the damage they cause.
Work with the security team to perform tests and uncover network vulnerabilities, such as penetration testing.
Fix detected vulnerabilities to maintain a high-security standard.
Recommend best practices for IT security.
Installing security measures and operating software to protect systems and information infrastructure, including firewalls and data encryption programs.
Must be capable of conducting analysis, confirming intrusion information and creating a forensically sound duplicate of the files.
Decrypts data and provides technical summaries and input.
Examines recovered data for relevant information and performs dynamic analysis to include timeline, statistical, and file signature analysis.
Performs real-time cyber defense handling tasks to support deployable Incident Response Teams (IRTs).