OpportunityWe are seeking a Cyber Threat Intelligence (CTI) analyst who collects, analyzes, and contextualizes data on cyber adversaries and attack methodologies. Their core mission is to transform raw threat intelligence into actionable insights, empowering security and incident response teams to anticipate and mitigate potential cyberattacks before they occur.
Core Responsibilities:
- Data Collection & Monitoring: Tracking open-source intelligence (OSINT), analyzing network anomalies, and monitoring the deep/dark web for leaks, ransomware blogs, and hacking forums.
- Adversary Profiling: Identifying the Tactics, Techniques, and Procedures (TTPs) and Indicators of Compromise (IOCs) used by threat actors and advanced persistent threats (APTs)
- Intelligence Reporting: Writing comprehensive, actionable reports for different audiences. This spans strategic assessments for executives and highly technical threat briefings for Security Operations Centers (SOCs).
- Proactive Threat Hunting: Looking for signs of compromise within the organization's environment that automated tools might have missed.
Qualifications
Required Skills/Experience:
- Senior: 8 years of experience
- Splunk Enterprise Security
- Must be a U.S. Citizen
- An active DoD Top Secret clearance with SCI eligibility is required to perform this work. Candidates are required to have an active Top Secret clearance with SCI eligibility upon hire, and the ability to maintain this level of clearance during their employment.
Education Requirements:
Preferred Qualifications:
- Microsoft Sentinel
- GIAC Cyber Threat Intelligence (GCTI)
Overview
People First. Technology Always.