Cyber Threat Intelligence Analyst Subject Matter Expert

Cyber Threat Intelligence Analyst - Subject Matter Expert

As a cyber threat intel analyst, you know the key to detecting and deterring malicious activity is quality risk‑based intelligence that maps to tactical behavior. At Booz Allen you can apply your expertise to investigate the most pressing cyber threats impacting our nation’s critical infrastructure and help teams take on the adversary’s perspective, identify motivations and targets, and recommend ways to harden systems and reduce attack surface.

As an Eastern Europe Subject Matter Expert on our team, you’ll oversee the collection, documentation, assessment, and analysis of cyber threat information using tools such as Google Threat Intelligence and the MITRE ATT&CK Framework. You’ll conduct strategic assessments on systems and networks, provide tactical analysis and influential recommendations for defensive operations, and play a lead role in incident analysis, adversarial research, and finished intelligence products that inform policy makers, cyber operators, and mission area leadership.

• Experience with Eastern Europe geopolitical and cyber threat intelligence.
• Experience with cyber threat intelligence analysis principles in a government or commercial environment.
• Experience with creating and presenting succinct briefings, presentations, and reports to technical and executive leadership.
• Knowledge of information security and information technology threats, attacks, and vulnerabilities in a cybersecurity context.
• Knowledge of Eastern Europe‑related cyber adversaries and their techniques, tactics, and procedures (TTP).
• Ability to convert raw cyber data into actionable intelligence in written narrative and tactical data formats following intelligence analysis tradecraft standards.
• Ability to work independently with minimal supervision.
• TS/SCI clearance.
• Education and experience:
  
  HS diploma or GED and 18+ years of experience, or Bachelor’s degree and 14+ years of experience, or Master’s degree and 12+ years of experience in cybersecurity or cyber threat intelligence.

• Experience with computer network protocols and operations.
• Experience with the Intelligence Community and its intelligence analysis standards.
• Knowledge of advanced persistent threats and campaigns.
• Knowledge of analytic threat models, including MITRE ATT&CK, Pyramid of Pain, Diamond Model, and Cyber Kill Chain.
• Ability to perform queries on indicators of compromise and characteristics (e.g., MD5, SHA1, IP addresses, file size, file name, file paths).
• Ability to conduct classified and unclassified research using research tools.
• Certifications such as Net+, Security+, CEH, CCNA, or SANS.

Applicants selected will be subject to a security investigation and must meet eligibility requirements for access to classified information. TS/SCI clearance is required.

Salary is determined by location, experience, and qualifications. The projected compensation range for this position is $99,000.00 to $ annualized (USD). Benefits include health, life, disability, financial, and retirement plans, paid leave, professional development, tuition assistance, work‑life programs, and dependent care.

All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, local, or international law.