Cyber Threat Analyst (Cybersecurity)
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
Location: Full-time onsite role at Ford Island, HI; telework is not permitted. Relocation expenses may be eligible for reimbursement of up to $10,000. Travel is required approximately 10% of the time.
Salary: $115,000–$150,000 annually, depending on experience and position level. A $10,000 sign-on bonus may be available subject to a 12-month commitment.
Company
provides security compliance, program governance, consulting, and customized technology solutions for public sector clients.
What you will do
- Analyze sensor feeds, NetFlow, IDS/IPS logs, proxy and DNS data, firewall telemetry, endpoint logs, and forensic evidence to identify adversary activity.
- Track advanced persistent threat campaigns, characterize tactics and techniques using MITRE ATT&CK and Cyber Kill Chain frameworks, and identify living-off-the-land behavior.
- Produce threat warnings, tippers, intelligence summaries, battlefield cyber threat assessments, and operational reports for DoD and mission partners.
- Develop threat hypotheses and conduct structured threat hunting across enterprise endpoints, on-premises networks, cloud enclaves, and classified environments.
- Translate threat intelligence into detection use cases, rule logic, and requirements for Splunk, Microsoft Sentinel, Elastic, and JCRS-D.
- Brief senior military and executive leadership on adversary capabilities, active campaigns, insider threats, and strategic cyber risk.
Requirements
- Active DoD Top Secret clearance with SCI eligibility is required; Secret clearance may be accepted with government approval.
- DoD 8140.03 / DCWF Work Role Code 531 or equivalent certification or degree is required before the start date.
- Accepted certifications include CompTIA CySA+, GCTI, CEH, CFR, GCIA, GCIH, CND, CISSP, CASP+ CE, and GCFA.
- Bachelor’s degree with at least 2 years of relevant experience, an associate degree with at least 4 years, or 6+ years of relevant cyber intelligence or military experience in lieu of a degree.
- Experience with adversary TTP analysis, structured threat intelligence products, packet captures, NetFlow, security logs, and enterprise SIEM querying.
- Ability to work standard operational shifts, with occasional after-hours support during critical incidents.
Nice to have
- Experience supporting USPACOM, DISA Pacific, DJOC, Joint Cyber Centers, or DoD defensive cyber operations units.
- Structured threat hunting across cloud and enterprise networks.
- Malware triage, sandboxing, de-obfuscation, hashing, and command-and-control extraction experience.
- Familiarity with AI prompting for automation and OSINT data collection.
- Experience with DoD incident response frameworks and reporting platforms such as Rally and DISS.
Culture & Benefits
- Medical, dental, and vision coverage options.
- Paid time off, paid holidays, and paid parental leave.
- Pre-tax and Roth retirement savings accounts.
- Life insurance, short- and long-term disability coverage, and employee assistance programs.
- Tuition and training reimbursement, flexible spending accounts, and dependent care savings accounts.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →