Cyber Threat Analyst

This Cyber Threat Analyst position supports the Federal Government and participates as a team member performing threat analyses based on knowledge of cybersecurity and concepts supporting intelligence analysis requirements for all-source cyber analysis and reporting. Contributes to development of analytical threat models and provides functional guidance and direction to threat studies team in overall conduct of project(s). Leverages scanning tools (i.e., VirusTotal) to conduct suspicious file scanning; performing queries, pivoting on indicators, and malware analysis on characteristics (Message-Digest Algorithm 5 (MD5), Secure Hash Algorithm 1 (SHA1), file size, file name, file paths, etc.). Work activities are performed under general guideline and direction. Supports team performing expert-level research and analysis of intelligence and related data support of threat studies. Provides advice, guidance and direction to threat studies team. Prepares, submits and presents reports and issue papers to customer representatives. Requires knowledge of advanced threat analysis technology in such areas as telecommunications, computer science, electronic warfare. Requires a detailed knowledge of Department of Defense and service level (Army, Navy, Air Force) intelligence communities, including collection methods and production resources and responsibilities. Requires skills and abilities in supervising the handling classified information. Requires strong knowledge of technology related to cybersecurity. Provides leadership, guidance, and direction to less-senior analysts. Uses Jira to to track analysis tasks and communicate status. May leverage tools such as Virus Total, Google Threat Intelligence, Recorded Future, etc. to obtain, fuse, and analyze cyber threat intelligence.

*This position requires full-time, on-site attendance Monday through Friday in the Baltimore metropolitan area.

• Clearance requirement: Active/current Secret (TS/SCI preferred).
• Education: Associates degree and 10+ years of experience; OR Bachelor’s degree and 8+ years of experience; OR Master’s Degree and 6+ years of experience; OR 3 years with PhD. A Bachelor's or Master's degree in one of the following fields is highly desired: Computer Science, Information Systems, Information Technology, Cybersecurity, Data Science, Mathematics, or Software Engineering. However, four (4) years of additional relevant experience or specialized training will be considered in lieu of a Bachelor’s degree. Relevant certifications (e.g., CYSA+, CISSP, CEH, CISM) are preferred.
• Experience: Experience in cybersecurity analysis, incident response, or digital forensics. Requires a detailed knowledge of Department of Defense and service level (Army, Navy, Air Force) intelligence communities, including collection methods, production resources, and responsibilities. Knowledge of advanced persistent threats (APTs), Tactics Techniques and Procedures (TTPs)
• Technical Skills: Proficiency in cybersecurity tools and technologies (e.g., Virus Total, Domain Tools, SIEM, IDS/IPS, forensic analysis tools). Knowledge of operating systems, network protocols, cyber threat actors, cyber kill chain, Indicator of Compromises (IOCs) and MITRE ATT&CK framework
• Analytical Skills: Requires skills and abilities in supervising the handling classified information. Strong analytical and problem-solving skills with the ability to interpret complex data and provide actionable insights.
• Communication Skills: Excellent written and verbal communication skills, with the ability to convey technical information and threat impacts to non-technical audiences and stakeholders. Requires prior experience briefing information to decision-makers and leaders. Uses Jira to track analysis tasks and communicate status.
• Team Player: Ability to work effectively in a team environment and collaborate with various stakeholders, including those in the DIB. Provides mentorship to less-senior analysts