Threat Analyst

We have a permanent position in either Huntsville, AL for a threat analyst. You must have an active TS/SCI to apply and be able to obtain a CI poly if you do not have one.

• Monitoring and Analysis:

  Continuously monitor computer networks for security issues, investigate security breaches, and analyze cyber threats.

• Threat Intelligence:

  Collect and analyze threat data from various sources, including open-source intelligence, dark web monitoring, and internal data, to identify potential threats and vulnerabilities.

• Incident Response:

  Participate in real-time cyber defense activities, supporting incident response teams and contributing to the investigation of cybercrimes.

• Reporting and Documentation:

  Prepare detailed reports and advisories, including actionable recommendations, for internal and external stakeholders.

• Collaboration:

  Work closely with other divisions, government agencies, and potentially international partners to address cyber threats.

• Malware Analysis:

  Analyze malware samples to identify active techniques, track campaigns, and understand attacker tactics, techniques, and procedures (TTPs).

• Tool Development:

  May develop tools and automation to enhance the team's capabilities in threat intelligence and analysis.

• Staying Updated:

  Keep abreast of the latest cyber threats, vulnerabilities, and security best practices.

• Strong understanding of cybersecurity principles, network security, endpoint security, and cloud security.
• Threat Intelligence Knowledge:

  Familiarity with cyber threat intelligence frameworks (e.g., MITRE ATT&CK, Cyber Kill Chain), threat intelligence platforms, and data analysis techniques.

Ability to analyze complex data, identify patterns, and develop solutions to cyber security challenges.

Excellent written and verbal communication skills to produce clear, detailed reports and deliver compelling presentations.

Ability to work effectively with cross-functional teams and stakeholders.

Several years of relevant experience in cyber threat intelligence, cybersecurity, or a related field is typically required

• Clearance:
  Top Secre t with the ability to sit for the CI Poly
• Requires BS or BA degree
• Should have more an intel analyst background
• 8 year overall experience to include experience with Splunk Enterprise Security (R)

Having the following tools experience and/or certifications:

• Microsoft Sentinel (P)
• GIAC Cyber Threat Intelligence (GCTI)