Appcast

Cyber Threat Operations & Intelligence Analysts - TS/SCI with Poly

Appcast$112K — $196K *
Aerospace & Defense
8 - 10 years of experience
Job Overview by Ladders

Qualifications

  • Active TS/SCI security clearance with polygraph required.
  • Bachelor's Degree in computer science, information systems, or related fields.
  • Ten years of experience in intelligence, information security, or related areas.
  • Deep understanding of global threats and Advanced Persistent Threats (APTs).
  • Experience with Elastic/Splunk or other SIEM for data visualization.
  • Ability to communicate complex findings to both technical and non-technical audiences.

Responsibilities

  • Analyze and synthesize threat data from various sources.
  • Collaborate closely with cyber analysts to detect persistent threats.
  • Create threat intelligence reports with findings and mitigations.
  • Articulate requirements to development teams for tool enhancements.
  • Present analytical results to diverse stakeholders including executives.
  • Monitor and track behaviors of cyber adversaries and develop TTPs.

Benefits

  • Comprehensive medical, dental, and vision coverage.
  • Generous paid time off, including holidays.
  • 401(k) retirement plan with matching contributions.
  • Life insurance and flexible work schedules to support work-life balance.
Full Job Description
Job Description:

Parsons is looking for a talented Threat Operations and Intelligence Analyst to join our growing team!

In this role you will serve as a subject matter expert with deep domain knowledge in specific threat areas of interest across the globe. You will be responsible for analyzing, correlating, and operationalizing threat intelligence to support proactive defensive cyber activities. This role requires strong analytical skills with an IC mission background, technical expertise, and the ability to communicate complex findings to diverse audiences. You will work in close collaboration with a team of cyber analysts to pinpoint the highest levels of persistent cyber threats with the common goal to prevent and eradicate threats to critical U.S. systems.

What Required Skills You'll Bring:
  • Active TS/SCI security clearance with polygraph
  • Must have a Bachelor's Degree in computer science, information systems, network forensics or other data analysis roles.
  • Ten (10+) years' experience working in the areas of intelligence, information security, network forensics, insider threat or security operations.
  • Specific understanding of key global areas of interest that pose threats to U.S. critical systems as well as an understanding of Advanced Persistent Threats (APTs), cyber actor motives and actions in depth.
  • Experience with reporting and IC analyst knowledge resources.
  • Experience with Elastic/Splunk or other Security Information and Event Management (SIEM) as well as experience creating visualizations and dashboards.
  • Exceptional ability to analyze, correlate, and synthesize threat data from diverse sources.
  • Ability to work with development teams and articulate requirements/enhancements to capabilities and tools.
  • Ability to perform log file analysis including creating threat intelligence reports that indicate findings, mitigations, and confidence.
  • Vast experience fanning advanced analytics, network diagrams, and other forms of associated knowledge to further understand systems, networks, environments, and adversaries.
  • Document findings and create detailed reports to ensure tradecraft is continually updated. Present results to technical and non-technical stakeholders
  • Superior written and verbal communication skills, including executive-level reporting and presentations.
  • Experience working with IC mission cybersecurity analysts on understanding the adversary and developing mission specific TTPs.
  • Ability to understand data in various formats to extract and enrich information to enhance its value.
  • Experience with XKS creating general queries, fingerprinting, and identifying atypical events.
  • Understanding of TCP/IP communication protocols and packet flows based on IP traffic; analysis of Packet Capture (PCAP) traffic in Wireshark
  • Familiarity writing signatures in Zeek and/or Snort


Security Clearance Requirement:
An active Top Secret SCI w/Polygraph security clearance is required for this position.

This position is part of our Federal Solutions team.

The Federal Solutions segment delivers resources to our US government customers that ensure the success of missions around the globe. Our intelligent employees drive the state of the art as they provide services and solutions in the areas of defense, security, intelligence, infrastructure, and environmental. We promote a culture of excellence and close-knit teams that take pride in delivering, protecting, and sustaining our nation's most critical assets, from Earth to cyberspace. Throughout the company, our people are anticipating what's next to deliver the solutions our customers need now.

Salary Range: $112,200.00 - $196,400.00

We value our employees and want our employees to take care of their overall wellbeing, which is why we offer best-in-class benefits such as medical, dental, vision, paid time off, 401(k), life insurance, flexible work schedules, and holidays to fit your busy lifestyle!

About Appcast

Appcast is a global leader in programmatic recruitment advertising technology. More than just a job board, Appcast?s programmatic recruitment advertising exchange connects employers and job seekers through real-time bidding and automatic job ad optimization. Appcast?s proprietary technology and advanced data analysis tools enable employers to source and hire top talent quickly, efficiently, and cost-effectively. Appcast is headquartered in Lebanon, New Hampshire, with offices in Boston, New York City, San Francisco, London, Manchester, and Budapest.
Learn more about Appcast
Size
200 employees
Industry
Founded
2014

Similar Jobs

More Jobs at Appcast

More Aerospace & Defense Jobs

Find similar Cyber Threat Operations & Intelligence Analysts - TS/SCI with Poly jobs: