Bachelor's degree with 5+ years of experience, or Master's with 3+ years, or PhD with no experience required.
Familiarity with DIA writing standards and knowledge of ICD203 & ICD106 standards.
Understanding of indicators of compromise and their application in Cyber Threat Intelligence (CTI).
Proficient in using and implementing the MITRE framework.
Knowledge of Advanced Persistent Threats (APTs) and their tactics, techniques, and procedures (TTPs).
Responsibilities
Collect and analyze threat data from diverse sources including open-source intelligence and threat feeds.
Identify threat actors and their tactics, techniques, and procedures (TTPs) used in cyberattacks.
Assess organizational vulnerabilities and risks based on the current threat landscape.
Produce intelligence reports to inform security teams and leadership decision-making.
Investigate significant cyber events and communicate findings to key stakeholders.
Benefits
On-site work environment in Arlington, VA.
Opportunity to work on critical national security issues.
Engagement with advanced cyber threat intelligence tools and methodologies.
Collaboration with federal departments and agencies.
Potential for professional development in cybersecurity and intelligence.
Full Job Description
Requisition #: 1617
Job Title: Cyber Threat Intelligence Analyst
Location: On-Site, Arlington, VA
Clearance Level: Top Secret, must have Clearance to Start
Job Description
Agile Defense is actively seeking a Cyber Threat Intelligence Analyst with background experience on Russia to apply their technical and analytic expertise to evaluate advanced and emerging cyber threats targeting Federal Departments and Agencies (D/A) and National Critical Functions (NCF). The selected candidate will produce all-source, strategic cyber intelligence assessments using various industry and government tools and classified and unclassified data sets.
They will Identify, Investigate, and pursue cyber events of significance and communicate findings to key decision makers via a broad range of intelligence products while adhering to intelligence tradecraft and methods. Position is contingent on successfully completing a program-based background investigation.
Duties include:
Collect and analyze threat data from multiple sources (open-source intelligence, dark web, threat feeds, internal logs).
Identify threat actors, tactics, techniques, and procedures (TTPs) used in cyberattacks.
Assess vulnerabilities and risks to the organization based on current threat landscape.
Produce intelligence reports for security teams and leadership to guide decision-making.
Education and Background
A minimum Bachelor's with 5+ years of experience, MS 3+ years of experience or PHD 0+ years of experience.
Required Skills
Active Top-Secret Clearance.
Familiarity with dia writing standards, and applicable knowledge on icd203 & icd106 standards.
Understanding of indicators of compromise and how they are utilized with CTI.
Knowledge on how to use and implement the MITRE framework.
Working knowledge of what an APT is.
Know how to utilize TTP's from an APT to leverage against potential targets.
Preferred Skills
ICS/SCADA/OT experience.
Experience working with ICS/SCADA/OT equipment and/or have certifications/education relating to industrial control systems.
Experienced with Russian threat in the context of the intelligence community world related to cybersecurity.
