Manager, Cyber Intelligence

This Senior Cyber Intelligence Analyst position offers a unique opportunity for growth and mentorship. As a Senior Cyber Intelligence Analyst, you will apply your intelligence analysis skills to monitor, assess, and report on cyberspace operations, capabilities, vulnerabilities, and personalities that could pose a threat to critical assets, the DoD Information Network (DoDIN), Defense Industrial Base (DIB) networks, and the US Intelligence Community and Interagency grid network sensor portfolios. In this role, you will also serve as a manager, performing supervisory duties for a staff of five direct report analysts. This includes conducting a full range of personnel management activities, such as performance evaluations, mentoring, and professional development, while fostering a culture of learning and collaboration within the team. Additionally, you will have the chance to conduct reviews, identify gaps, recommend solutions, and evaluate large datasets from diverse sources. You will develop reports and briefing artifacts for key stakeholders, enhancing the team's contributions to overall mission success.

As a Senior Cyber Intelligence Analyst, you will be recognized as an expert in the field, researching and evaluating technical and all-source intelligence with specific emphasis on cryptocurrency transactions and counter-threat finance, network operations, and cyber warfare tactics, techniques, and procedures focused on threats to networked weapons platforms and US information networks. Your analyses of threat data from various sources and network events will directly impact current operations, and your all-source research will inform advisory capability and intent. You will prepare assessments and cyber threat profiles of current events based on sophisticated collection, research, and analysis of classified and open-source information. Your role will also involve developing and maintaining analytical procedures to meet changing requirements and ensure maximum operational effectiveness, underlining the urgency and significance of your work.

Mandatory Qualifications:

• Possess aligned DOD and Military training focused on Cyber Threat Intelligence Analysis / Intelligence Analysis.
• Familiarity with Cloud Security Architecture and all related aspects of cybersecurity operations and analysis (e.g., incident response & management, forensic media analysis, malware analysis/reverse-engineering, and threat intelligence analysis).
• In-depth knowledge of network and application protocols, cyber vulnerabilities, exploitation techniques, and adversary methodologies (TTPs).
• Proficient in analyzing various types of network data (e.g., Netflow, PCAP, custom application logs) and employing network sensors to support defensive cyber operations and investigations.
• Experience with Network Intrusion Detection Systems (NIDS) and Intrusion Prevention Systems (IPS) for threat detection and response.
• Familiarity with Endpoint Detection and Response (EDR) agents for monitoring end-user devices.
• Proficiency in Security Information and Event Management (SIEM) forwarders for centralized logging and threat detection.
• Experience with vulnerability scanners to identify and assess weaknesses in systems and applications.
• Knowledge of log collectors for managing logs to improve incident response and threat hunting capabilities. 
• Possess in current standing or be willing to complete applicable professional certifications aligned with the DOD Cybersecurity Workforce Framework: IAM Level II & III, CSSP Analyst (*CYSA+, *CCE, *GCTI, Security+, GICSP, GSEC, CND, CISSP, CASP+, GCIA, GCIH, GCFA, CEH), GIAC Open Source Intelligence (GOSI) Certification, or SANS SEC487 Open-Source Intelligence (OSINT) Gathering and Analysis course). *Preferred certifications - CySA+, CCE, GCTI.
• Possess expertise in using Intelligence Community databases, analytical tool suites, and commercial tool suite applications.
• Experience gathering, analyzing, correlating, or evaluating information from various resources, such as law enforcement databases.
• Experience with Law Enforcement/Counterintelligence (LE/CI) Operations and/or Cyberspace Operations.
• Possess knowledge of network and application protocols, cyber vulnerabilities and exploitation techniques, and cyber threat/adversary methodologies (TTPS).
• Knowledge of building extended cybersecurity analytics.
• Must have demonstrated experience briefing Senior Executive Service (SES) and General Officer/Flag Officer (GO/FO) leadership.
• Active TS/SCI with CI Poly eligibility.
• 10 years of experience, may have supervisory or lead experience.

Preferred Qualifications:

• Fluency in either Chinese Mandarin, Korean, Japanese, or Russian (desired but not required).
• Experience in intelligence-driven defense and/or Cyber-Kill Chain methodologies.
• Possess an understanding of Cloud Security Architecture and related aspects of cybersecurity operations/analysis (e.g., incident response & management, forensic media analysis, malware analysis/reverse-engineering, cyber threat intelligence analysis, etc.) and security architecture.
• Degree in one of the following fields from an ABET or NCAE-C accredited institution: Information Technology, Computer Science, Cybersecurity, Data Science, Information Systems, or Software Engineering.