Senior Threat Inteligence Analyst

• Location: Onsite – New Carrollton, MD or Memphis, TN
• Terms: Full-time
• Clearance: Top-Secret
• Travel: 0% (onsite presence at client facilities as directed)

• Position Description
• We are seeking a Senior Threat Intel Analyst to serve as task lead for cyber threat intelligence (CTI) collection and processing in a 24x7x365 Security Operations Center (SOC) supporting a large federal agency. This individual contributor and recognized thought leader provides technical expertise in adversary cyber capabilities, assesses the intentions of adversary groups to attack and exploit U.S. private sector and government networks, and determines the applicability of threat reporting to the client’s applications and infrastructure. The role develops cutting-edge solutions with other experts and mentors junior staff.

The successful candidate will:

• Lead collection and processing of threat intelligence from all sources.
• Turn intelligence into actionable monitoring and countermeasures.
• Maintain awareness of active threat actors and their indicators.
• Mentor and coach analysts on adversary tactics.

Responsibilities:

• Serve as task lead for CTI collection and processing, assigning and reviewing the work of intelligence analysts.
• Compile information on emerging threats at different classification levels from Internet security firms, government organizations, private industry, foreign governments, and internal sources, and transform it into actionable monitoring through custom content.
• Review cybersecurity news feeds, signature updates, incident reports, threat briefs, and vulnerability alerts from the intelligence community, law enforcement, and other external sources, and determine applicability to the client environment.
• Maintain awareness of active cyber threat actors and associated threat sets, including indicators of compromise.
• Process and integrate classified CTI up to the Top Secret level.
• Identify potential threats based on the client’s hardware and software, and current and evolving hacking tools and methodologies.
• Determine risks to the enterprise and develop mitigations and countermeasures.
• Participate in active investigations as requested, including during non-regular duty hours within one hour of notification.
• Produce adversary threat set profiles and intelligence products.

• Required Skills and Experience
• Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related field and 12+ years of relevant professional experience; three (3) years of additional relevant experience may be substituted in lieu of a degree.
• Widely recognized thought leader in cyber threat intelligence who contributes to the body of knowledge in the field.
• Ability to resolve undefined, highly complex, and multi-dimensional problems requiring significant technical depth, conceptualization, and interpretation.
• Expert knowledge and mastery of advanced technologies, adversary tactics, techniques, and procedures (TTPs), and threat actor tracking.
• Experience processing classified intelligence and working with intelligence community or law enforcement partners.
• Experience mentoring and coaching junior technical staff.
• Experience leading a team or serving as a task lead, including assigning work, reviewing quality, and reporting status to client leadership.

• Desired
• Experience supporting federal government contracts as a contractor, including working to contract performance standards, deliverable schedules, and government review and approval processes.
• Certifications such as GCTI, GCIH, or CTIA.
• Experience with threat intelligence platforms and MITRE ATT&CK.
• TS/SCI eligibility.

Work Authorization/Clearance: U.S. Citizenship is required with an active Top Secret clearance.