Technical Lead

Analyst1 • Columbia, WA

2d • Remote

About The Position

The Technical Lead will own technical delivery of an international government customer’s cyber threat intelligence (CTI) program, bringing Analyst1’s threat intelligence platform into the customer’s environment. The role focuses on enhancing the customer’s existing MISP environment, integrating it with existing security tools, adding complementary functionality, and making effective use of existing data sources. The position is contingent on contract award and requires up to 50% international travel, including travel to The Hague, Netherlands, as required.

The Technical Lead will guide the solution from requirements through architecture, implementation, deployment, and transition into operations, while ensuring it remains secure, safe, performant, and integrated with the customer’s environment. The role will be named in the company’s proposal and will lead the program’s Customer Success Manager and Customer Support Engineer, who report directly to the Technical Lead. The position also involves representing the technical approach during proposal evaluation, understanding the customer’s cyber teams and operating environment, managing third-party components and enhancements, and sharing customer-driven product feedback.

Requirements

• At least 5 years of experience with MISP technologies.
• Active DoD Secret or NATO Secret security clearance, or higher.
• Commitment to remain in the role for at least the first 12 months of the program.
• Experience in cyber intelligence, cyber automation, or cyber defense roles or industry.
• Strong technical background and experience as a former practitioner in one or more cyber analyst roles, such as CTI, SOC, Threat Hunting, or VM.
• Strong troubleshooting, presentation, and consultative skills.
• Ability to communicate technically with analysts and strategically with senior executives.
• Strong verbal and written communication skills, including communicating directly with clients.
• BA/BS degree or equivalent combination of education and experience.
• Willingness to travel to The Hague, Netherlands, as required, up to 50% of the time.
• Willingness to work outside standard hours when working remotely.

Nice To Haves

• Experience producing or using cyber threat intelligence.
• Experience working with and/or configuring SIEM or Log Manager tools, such as Splunk or Elastic.
• Experience authoring signatures, rules, or alerts to aid in malicious activity detection, including SNORT, YARA, or SURICATA.
• Experience supporting SOC operations.
• Background as a government civilian or contractor.

Responsibilities

• Understand Analyst1’s role in the customer’s ideal and current operations.
• Represent the technical approach in discussions with the customer during proposal evaluation.
• Own solution analysis and requirements management.
• Own the solution’s architecture and design.
• Lead implementation and integration with the customer’s existing security tools.
• Lead deployment to the customer’s test and production environments.
• Lead the transition of the solution into operations.
• Own the solution’s security, safety, and performance.
• Manage third-party components and follow-on enhancements.
• Understand the daily workings of the customer’s cyber teams and the organizational complexities of teams using Analyst1 together.
• Lead the program’s Customer Success Manager and Support Specialist.
• Provide product feedback to the product team based on customer experiences.

Benefits

• Competitive salary and bonus/commission.
• Flexible Time Off Policy.
• 401(k).
• Life insurance.
• Pet insurance.
• Pre-paid legal aid options.
• Full benefits package, including fully funded medical, dental, and vision coverage.
• Week off from Christmas through New Year’s Day.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior