Cyber Threat Intelligence Analyst (Cybersecurity)
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
TL;DR
Cyber Threat Intelligence Analyst (Cybersecurity): Evaluating advanced and emerging cyber threats targeting Federal Departments and National Critical Functions with an accent on PRC threat actors and all-source intelligence assessments. Focus on identifying TTPs, assessing vulnerabilities, and producing strategic intelligence reports for key decision makers.
Location: Hybrid, must be based in Arlington, VA (onsite 2 days a week)
Company
A defense contractor providing adaptive innovation and advanced technologies to support national security and critical civilian missions.
What you will do
- Collect and analyze threat data from multiple sources including OSINT, dark web, and internal logs.
- Identify threat actors, tactics, techniques, and procedures (TTPs) used in cyberattacks.
- Assess vulnerabilities and organizational risks based on the current threat landscape.
- Produce strategic all-source intelligence reports to guide security teams and leadership decision-making.
Requirements
- Active Top-Secret Clearance is required to start.
- Education and experience: Bachelor's with 5+ years, MS with 3+ years, or PhD.
- Familiarity with DIA writing standards, including ICD 203 and ICD 106.
- Deep understanding of Indicators of Compromise (IoC) and their application in CTI.
- Knowledge of the MITRE framework and the ability to implement it.
- Working knowledge of Advanced Persistent Threats (APT) and their TTPs.
Nice to have
- Experience or certifications related to ICS/SCADA/OT equipment.
- Expertise regarding the People's Republic of China (PRC) threat within the intelligence community.
Culture & Benefits
- Values-driven environment based on the "6Hs": Happy, Helpful, Honest, Humble, Hungry, and Hustle.
- Strong emphasis on teamwork, mutual respect, and a supportive atmosphere.
- Focus on advancing critical national security missions with a tireless work ethic.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →