Cyber Threat Intelligence (CTI) Analyst

Overview

Edgewater Federal Solutions is currently seeking a Cyber Threat Intelligence (CTI) Analyst to provide support to an Edgewater Federal government contract.

** Due to the nature of the contract and work, US Citizenship is a requirement**

• Become an integral part of a diverse team.
• Establish and maintain complete intelligence cycle operations to support enterprise cyber security, accounting for strategic, operational, and tactical intelligence needs.
• Use open source, government-provided and commercially provided intelligence in support of cyber security.
• Potentially attend classified briefings that may help inform intelligence efforts.
• Develop and brief status updates to the Federal Team.
• Research known adversarial Tactics, Techniques and Procedures (TTPs) to identify foundational components, isolate associated host or network events, and enable threat mitigation, detection, and response.
• Produce comprehensive cyber security reports including sourced and summarized threat intelligence, threat hunt findings and limitations, and present recommendations to system owners, cyber defenders, and policy makers.
• Disseminate timely Indicators of Compromise (IOCs) and warnings of cyber threat activity against the U.S. and NIH-owned and operated hosts and networks.
• Identify and provide high quality sources of indicators of attack and compromise to the team for application to the sensor array.
• Participate in hunt, computer network defense, and incident response activities Conduct stakeholder analysis, determine client's goals and objectives, and identify appropriate strategies to support the client's mission/vision.
• Create an NIH Cyber Threat Profile and analysis.
• Complete job/system-related training as required by NIH.

• BS/BA degree (additional years of experience in cyber security reduce this educational requirement).
• 12 or more years work experience.
• Sound cyber security knowledge foundation, to include sufficient understanding of networking and application layer protocols.
• Knowledge of the cy[...]nihowned and operated hosts and networks.