Cyber Threat Analyst / Active TS/SCI

Peraton; Wiesbaden; Vor Ort; EUR 90.000 - 144.000; Vollzeit

Zusammenfassung

Peraton is seeking an experienced Cyber Threat Analyst for its Regional Cyber Center-Europe program, on-site in Wiesbaden, Germany. The role focuses on analyzing logs, correlating indicators, and supporting escalation decisions to protect DoD networks.

You'll review topology, perform memory forensics, and develop threat intel products for mission partners. A DoD TS/SCI clearance and US citizenship are required.

Qualifikationen

• Bachelor's degree in STEM or Business Administration and 5+ years cybersecurity or threat analysis experience.
• Associate's degree with 7+ years specialized experience or 11 years of relevant experience in lieu of bachelor’s degree.
• DoW 8140 - Cybersecurity (Vulnerability Analyst) - Intermediate.
• Active certifications: GIAC, Microsoft SOC Analyst, Zero Point Security RTO, or OSDA.
• U.S. citizenship required and DoW TS/SCI clearance.

Aufgaben

• Analyze network logs (firewall, PCAP, NetFlow, DNS) to identify threats across USAREUR-AF networks.
• Correlate indicators across data sources to build threat pictures and support escalation decisions.
• Review topology diagrams to identify anomalous traffic and potential attack paths.
• Perform memory and system dump analysis to detect persistent threats and APT activity.
• Develop threat awareness products and disseminate threat summaries and situational reports.

Kenntnisse

Threat analysis

Cybersecurity

Log analysis

Network monitoring

Ausbildung

Bachelor's degree in STEM or Business Administration

Associate's degree with 7+ years experience

11 years of relevant experience in lieu of a degree

Tools

Zeek (Bro)

SiLK/nfdump/Elastic

Wireshark

MITRE ATT&CK

D3FEND

Elastic Stack

Splunk

Volatility

Rekall

MISP/OpenCTI

Jobbeschreibung

Responsibilities

Peraton is seeking to hire an experienced Cyber Threat Analyst for its' Regional Cyber Center-Europe program

Location: On-site, Wiesbaden, Germany

Responsibilities

• Analyze network logs including firewall events, PCAP captures, NetFlow records, and DNS query data to identify malicious activity and threat patterns across USAREUR-AF networks
• Correlate threat indicators and suspicious activity across multiple data sources to build comprehensive threat pictures and support escalation decisions
• Review network architecture diagrams and topology documentation to identify anomalous traffic flows, unauthorized connections, and potential attack paths
• Perform memory and system dump analysis to identify malicious processes, persistence mechanisms, and indicators of advanced persistent threat (APT) activity
• Develop and disseminate cyber threat awareness products, including threat summaries, indicator bulletins, and situational awareness reports for mission partners and leadership
• Support proactive threat hunting operations by developing hypotheses, querying data repositories, and documenting hunt findings in support of CSSP defensive missions

#RCC-E

Qualifications

Required

• Bachelor's degree in a STEM field or Business Administration and minimum of 5 years of related cybersecurity or threat analysis experience; or an associate's degree and minimum of 7 years specialized experience, or 11 years of relevant experience in lieu of the bachelors degree requirement
  • Must meet TESA Qualification qualification
• DoW 8140 - Cybersecurity (Vulnerability Analyst) - Intermediate
• Certifications - must hold active certifications (one of the following)
  • SANS (any GIAC certification); OR
  • Microsoft Certified: Security Operations Analyst Associate; OR
  • Zero Point Security RTO (Red Team Ops); OR
  • OSDA (Offensive Security Defense Analyst)
• U.S. citizenship required
• Active DoW TS/SCI security clearance

Preferred

• Experience with Zeek (Bro) for network traffic analysis and protocol inspection
• Proficiency with NetFlow analysis tools (e.g., SiLK, nfdump, Elastic) for traffic baselining
• Advanced Wireshark skills for deep packet inspection and protocol anomaly detection
• Working knowledge of MITRE ATT&CK and D3FEND frameworks for threat mapping and defensive gap analysis
• Experience with Elastic Stack or Splunk for large-scale log correlation and threat hunting queries
• Familiarity with memory forensics tools (e.g., Volatility, Rekall) for system dump analysis
• Knowledge of threat intelligence platforms (e.g., MISP, OpenCTI) and indicator management
• Experience producing intelligence-style products for technical and non-technical audiences

Peraton Overview

Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world's leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees do the can't be done by solving the most daunting challenges facing our customers. Visit peraton.com to learn how we're keeping people around the world safe and secure.

Target Salary Range

$104,000 - $166,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual's experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.

EEO

EEO: Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.