Threat Hunt experience

Peraton•Arlington, VA

10d•Onsite

About The Position

As a Jr Industrial Control System Cyber Threat Intelligence Analyst, you will play a vital role in safeguarding critical infrastructure by integrating multiple intelligence sources to create actionable insights and recommendations. You will support operational teams and senior leaders by investigating and analyzing cyber threats specific to operational technology environments.

Requirements

Bachelor’s degree and 2 years of experience, or Associate’s degree and 4 years, or High School diploma and 6+ years of relevant experience in lieu of a degree.
Hands-on experience in processing, triage, threat analysis, and responding to cyber incident reports.
Demonstrated ability to research and analyze cyber threats across multiple industries or timeframes, including critical infrastructure sectors.
Familiarity with cyber threat intelligence tools such as DomainTools, VirusTotal, SHODAN, etc..
Proven experience producing all-source (unclassified and classified) finished intelligence assessments aligned with ICD203 analytic tradecraft standards.
Demonstrated strong collaboration skills and ability to build key threat intelligence partnerships to enhance information sharing and cyber defenses.
U.S. citizenship is required.
Active Top Secret Security Clearance with SCI eligibility.
Ability to obtain and maintain DHS EOD agency clearance prior to start.

Nice To Haves

SANS Global Industrial Cyber Security Professional (GICSP).
SANS GIAC Response and Industrial Defense (GRID).
SANS GIAC Cyber Threat Intelligence (GCTI).

Responsibilities

Fuse multiple intelligence sources to develop comprehensive products, recommendations, and prioritize organizational focus.
Research and investigate current threats in operational technology (OT), critical infrastructure sectors, and mission areas.
Analyze data to derive insights on adversary capabilities, intentions, tactics, and behaviors in relation to critical infrastructure attacks.
Research and review cyber warfare tactics, techniques, and procedures affecting information networks.
Prepare assessments and threat profiles related to ICS/SCADA systems based on recent trends.
Escalate new or high-priority threats to the Cyber Physical Forensics Section as needed.
Investigate OT defensive tactics, techniques, and procedures (TTPs) for threat detection and response.
Map ICS activities and threats using the MITRE ATT&CK Framework.
Collaborate with host, network, and cloud forensic analysts to support incident response and threat hunting missions.
Identify potential open-source vulnerabilities within ICS/SCADA environments.
Assess emerging threats and vulnerabilities related to homeland security.
Analyze classified threat intelligence reports concerning ICS/SCADA to evaluate adversary intent and capability.
Produce high-quality papers, presentations, and recommendations for senior US government intelligence and operations officials.