EMERGING THREATS CYBER ANALYST

EOA Technologies LLC•Fort Meade, MD

1d•Hybrid

About The Position

EOA Technologies is seeking an Emerging Threats Cyber Analyst to identify and assess the capabilities and activities of cyber criminals or foreign intelligence entities. This role is suited for candidates with prior experience performing cybersecurity threat analysis. In this role, you will conduct research to maintain an in-depth understanding of emerging cyber threats, contribute to detection strategies, and support a team of threat analysts with the goal to eradicate vulnerabilities to critical U.S. systems.

Requirements

Possess an active TS/SCI with Polygraph security clearance
Bachelor’s Degree in computer science, information systems, network forensics or other data analysis roles.
Three (3+) years’ experience working in the areas of intelligence, information security, network forensics, insider threat or security operations.
Experience with XKS creating general queries, fingerprinting, and identifying atypical events.
Experience with Elastic/Splunk/ or other Security Information and Event Management (SIEM) experience creating visualizations and dashboards.
Understanding of TCP/IP communication protocols and packet flows based on IP traffic; analysis of Packet Capture (PCAP) traffic in Wireshark.
Familiarity writing signatures in Zeek and/or Snort.
Ability to translate knowledge, findings and recommendations to the classified environment.
Document findings, create detailed reports, and present results to technical and non-technical stakeholders.

Responsibilities

Conduct research to maintain an in-depth understanding of emerging cyber threats.
Contribute to detection strategies.
Support a team of threat analysts with the goal to eradicate vulnerabilities to critical U.S. systems.
Research OSINT and current world event trends; correlate and translate vulnerabilities across supply chain, defense industrial base and other critical system areas of interest.
Ability to understand data in various formats to extract and enrich information to enhance its value.
Experience with XKS creating general queries, fingerprinting, and identifying atypical events.
Experience with Elastic/Splunk/ or other Security Information and Event Management (SIEM) experience creating visualizations and dashboards.
Understanding of TCP/IP communication protocols and packet flows based on IP traffic; analysis of Packet Capture (PCAP) traffic in Wireshark.
Familiarity writing signatures in Zeek and/or Snort.
Ability to translate knowledge, findings and recommendations to the classified environment.
Document findings, create detailed reports, and present results to technical and non-technical stakeholders.