Title: Cybersecurity Threat Analyst I
Location: Alexandria, VA
Clearance: TS/SCI with the ability to obtain and maintain a CI polygraph
Job Details:- Support proactive threat analysis and hunt activities using established hypotheses, queries, procedures, and data sources
- Proactively analyze security telemetry to identify indicators of compromise, anomalous behavior, and adversary activity that has not met an incident threshold or has evaded automated security controls
- Assess and correlate data from multiple sources, including network, endpoint, identity, SIEM, threat intelligence, vulnerability, and other available security data
- Document hunt activity, findings, evidence, and recommended follow-on actions in authorized systems and initiate or support incident-response processes when malicious activity is identified
- Provide relevant findings and trends for SOC operational reporting, significant-activity reporting, and defensive awareness
- Research indicators, adversary behaviors, and suspicious activity under guidance from senior threat personnel.
- Maintain clear hunt notes and document negative as well as positive findings to support repeatability and knowledge development
- Escalate suspicious activity and potential detection gaps to senior threat analysts and watch operations
Requirements:- Bachelor's degree from an accredited institute in a technical discipline applicable to the position; an additional 4 years of may be substituted in lieu of a degree
- Minimum two (2) years of relevant experience in addition to education level
- Foundational knowledge of common cyber threats, indicators of compromise, network/host artifacts, and security monitoring concepts
- Familiarity with SIEM/search technologies, threat intelligence, MITRE ATT&CK, or security data analysis is desired
- Ability to document analytical reasoning and communicate findings clearly
- Must possess current DoD 8570 IAT II or IAM II certification
- Experience working in a DoD or IC environment desired
- Current active TS/SCI clearance, with the ability to obtain and maintain a CI polygraph
