Cyber Threat Intelligence Analyst

Cyber Threat Intelligence Analyst

Requirements

• TS/SCI clearance with ability to obtain a CI poly
• Bachelor’s Degree and Six (6) years of relative work experience (additional experience may be considered in lieu of a degree)
• DOD 8570.01 IAT II certification
• Ability to attain/maintain CSSP Analyst certification within six months of joining the team
• Experience with Cyber Threat Intelligence
• Ability to work independently and with minimal supervision
• Proactive in performing assigned job duties
• Excellent communicator
• Team player and facilitate a collaborative work environment

Responsibilities

• Conducts analysis and research on emerging threats and intelligence by collecting and analyzing commercial and government cyber intelligence reports to provide actionable cyber intelligence to support incident response, vulnerability management, and other cybersecurity initiatives.
• Monitors and assesses the global threat landscape, including threat actors, malware, hacking techniques that may impact NGA systems and networks.
• Collaborates with internal and external stakeholders, to gather and share relevant threat intelligence.
• Develops and maintains threat profiles and reports to enhance detection and response capabilities.
• Continuously updates and refines existing threat intelligence processes and methodologies to ensure the organization remains at the forefront of cyber defense.
• Develops and provides to the Government and other Contract Services regular and ad hoc reports, briefs, documents, diagrams, and other products as required to ensure stakeholders are aware of and understand cybersecurity threats and the risk posed to NGA by the threat.
• Identifies and assesses the relevance and effectiveness of signatures and indicators of compromise based on intelligence.
• Develops, reviews, and when properly authorized by the Government, disseminates NGA CSOC developed Cyber Intelligence products to internal to NGA and external DoD and IC partners, to include but not limited to threat intelligence reports, significant cyber activity reports, incident investigation reports, and other products as directed by the Government.
• Analyzes patterns of behavior to identify and determine adversary intent and provides this analysis to the Government in a document, briefing and/or other products as required.
• Develops comprehensive threat models of adversary activity and provides this analysis to the Government in a formal report, briefing, or other product as required.
• Coordinates with NGA entities, to include but not limited to Cyber Counterintelligence, Insider Threat, and Red/Blue Team to perform adversary profiling and threat modeling.
• Documents all work in the authorized ticketing system with a level of detail sufficient to enable the Government and other services to reconstruct the analyst’s analysis process.
• Provides input to the daily CSOC Significant Activity Report, the daily CSOC Operations Update, and the Weekly CSOC Status Report.

Preferred Qualifications

• Master’s Degree
• Security Operations Center (SOC) experience