Skip to content

Cyber Intel Analyst / Indications and Warnings
Company | Peraton |
---|
Location | Arlington, VA, USA |
---|
Salary | $86000 – $138000 |
---|
Type | Full-Time |
---|
Degrees | Bachelor’s |
---|
Experience Level | Senior |
---|
Requirements
- Bachelor’s degree and 5 years of experience is required. An additional 4 years of experience may be considered in lieu of degree.
- Possess ONE of the following certifications: CAP, CASP+ CE, CCISO, CCNA-Security, CISM, CISSP (or Associate), CND, CSSLP, CySA+, GICSP, GSEC, GSLC, Security+ CE, SSCP, PPDA, Agile IC, SNOW App Dev
- Experience with Splunk SIEM.
- Experience leveraging the MITRE ATT&CK matrix or other threat models (e.g. Lockheed Martin Kill Chain, Diamond Model).
- Knowledge or experience tracking advanced persistent threats (APTs).
- Knowledge or experience pivoting from IOCs to identify related infrastructure.
- Demonstrated written communication skills, communicating technical topics in an analytic fashion.
- Experience briefing individuals and large groups, ranging from the working to executive level.
- Demonstrated ability to work independently as well as with a team of other analysts.
- Active U.S. Passport and the ability to travel up to two weeks at a time, both foreign and domestically (up to10%).
- U.S. citizenship required.
- Active Top Secret security clearance with the ability to obtain SCI is required.
Responsibilities
- Leverage open-source, proprietary/vendor, and classified reporting to closely track advanced persistent threat actor activity.
- Perform pattern, trend, and behavior analysis, as well as other specialized analysis techniques to identify malicious cyber threat activity targeting DOS information, systems and personnel.
- Maintain records to catalog and track malicious cyber threat activity targeting DOS information, systems and personnel.
- Identify Indicators of Compromise (IOCs) present on an Enterprise network through the use of a SIEM and other security tools and logs.
- Liaise with members of the Intelligence Community (IC); and Acts as the fusion analysis cell within Cyber Threat Analysis Division (CTAD).
- Provide presentations to a variety of technical and non-technical audiences pertaining to cyber threats.
- For up to 10% travel to foreign and domestic locations.
Preferred Qualifications
No preferred qualifications provided.