DCISE Technical Lead

Tharros is seeking a DCISE Technical Lead to serve as the project lead for all Defense Industrial Base Collaborative Information Sharing Environment (DCISE) operations at the DoD Cyber Crime Center (DC3). This position provides technical oversight and guidance across five DCISE task areas and serves as the contractor representative to DCISE executive leadership.

The Technical Lead will direct a team of cyber threat analysts and intelligence professionals who produce approximately 1,600 analytical products per year, conduct malware triage and analysis, manage partner engagement, and operate sensor platforms.

• Provide technical oversight and guidance on all DCISE tasks, including threat analysis, partner engagement, and analytical product development
• Serve as the contractor representative to DCISE executive leadership
• Supervise a team of cyber threat analysts, cyber intelligence analysts, and partner engagement specialists producing all‑source cyber analytical products
• Direct malware triage, suspicious file scanning, indicator pivoting, and network analysis operations
• Oversee intelligence analysis processes including OSINT and closed‑source intelligence gathering, source verification, data fusion, link analysis, and threat actor profiling
• Manage the quality, timeliness, and accuracy of all DCISE deliverables
• Support financial and business process management for DCISE tasks, excluding inherently governmental functions
• Coordinate with DIB partners on cyber threat information sharing, incident response, and vulnerability mitigation
• Contribute to the development and maintenance of DCISE SOPs and analytical tradecraft standards

• Active Top Secret/SCI clearance eligibility
• 10 years of experience leading technical efforts supporting intelligence analysis requirements in all‑source cyber analysis and reporting
• 10 years of experience supervising teams supporting intelligence analysis requirements in all‑source cyber analysis and reporting
• 10 years of experience with scanning tools (e.g., Virus Total) to conduct suspicious file scanning, and performing queries, pivoting on indicators, and malware analysis on characteristics (MD5, SHA1, file size, file name, file paths)
• 10 years of experience with intelligence analysis processes, including OSINT and closed‑source intelligence gathering, source verification, data fusion, link analysis, and threat actor knowledge
• 10 years of experience conducting malware and network analysis, identifying protocols, persistence mechanisms, encoding techniques, and encryption and how they are used by Advanced Persistent Threat (APT) actors

• Prior DCISE, CISA, or DC3 operational experience
• Experience with DIB cybersecurity programs and 32 CFR Part 236 mandatory/voluntary reporting requirements
• Familiarity with threat intelligence platforms (Crowd Strike, Intel 471, Recorded Future, or equivalent)
• GIAC certifications (GCTI, GREM, GCIH) or equivalent technical credentials
• Experience producing finished intelligence products under IC analytic standards