CTI Analyst - Mid / Public Trust

Peraton; Warrenton (VA); On-site; USD 66,000 - 106,000; Full time

Job summary

Peraton is seeking a CTI Analyst - Mid to research and analyze open source and classified reporting to produce threat intelligence products. Responsibilities include documenting emerging threats, coordinating with stakeholders, and providing operational analysis during cyber exercises. Candidates require a Bachelor's degree and 5 years of experience in Cyber Threat Analytics, with U.S. citizenship and an Active Public Trust. Salary ranges from $66,000 to $106,000 based on experience.

Qualifications

• Bachelor's degree and minimum of 5 years of relevant experience.
• Demonstrated work experience in Cyber Threat Analytics.
• U.S. citizenship and Active Public Trust required.
• Willingness to travel 10-25%.

Responsibilities

• Research and analyze open source and classified reporting for threat trends.
• Document and report threats that exploit vulnerabilities of stakeholders.
• Develop products for situational awareness of cyber threats.
• Respond to requests for analysis related to cyber threat activity.

Skills

Cyber Threat Analytics

Network Defense

MITRE Attack Framework

Intrusion detection and prevention

Incident response

Log analysis and monitoring

Education

Bachelor's degree

Master's degree

PhD

Tools

Vulnerability Scanning Tools

Penetration Testing Tools

Incident Management Tools

Job description

CTI Analyst - Mid / Public Trust

Location

Warrenton, VA

Responsibilities

• Research and analyze open source and classified reporting to identify current and emerging threat trends and work with cyber community and Intelligence Community partners to produce and offer threat intelligence products and briefings to internal and external partners and stakeholders.
• Document and report current and emerging threats that will exploit vulnerabilities of Department of Homeland Security stakeholders and to the Government.
• Communicate, coordinate, share information, and work closely with customer components.
• Document Indicators of Compromises and behaviors of new or high-impact tactics, techniques, and procedures (TTPs), used to infiltrate networks, systems, and assets.
• Develop informational and analytic products daily designed to increase situational awareness and advanced warning of current and emerging cybersecurity threats and risks.
• Report on underlying patterns of behavior by conducting detailed analysis of incidents, threats and risks and associated impacts and consequences, vulnerabilities, tactics, techniques, and procedures (TTP), and other malicious and non-malicious indicators.
• Develop operational-level trends analysis products that leverage customer internal data repositories, classified and unclassified open-source reporting to provide situational awareness of emerging cyber threat and risk trends to customer partners, stakeholders, and customers.
• Provide operational analysis coordination, research, and reporting support to the customer during internal cyber incident management exercises as well as national-level cyber exercises.
• Identify and leverage new threat-based frameworks and methodologies for analyzing adversaries' activities based on network and system vulnerabilities, adversary tactics, techniques, and procedures (TTPs), (e.g., scanning, unsuccessful attempts, malware, phishing campaigns, privilege escalation, user and root-level intrusions, lateral movement, and data exfiltration).
• Enrich information within the Threat Indicator/Information Database to provide additional context to partial information sources and give additional information about specific IP addresses, DNS lookups and perform queries of other DHS systems or information repositories to pull additional information.
• Respond to requests for analysis and searches for corroborating, clarifying, or enhancing information or intelligence related to cyber threat activity.
• Evaluate reports of cyber threat activity by leveraging either the internally developed Threat Scoring Methodology (TSM) or the National Security Concern Score (NSCS).
• Produce weekly, monthly, quarterly, and annual performance metrics reports.

Qualifications

Minimum requirements:

• Bachelor's degree and minimum of 5 years of relevant experience; or Master's degree and 3+ years; or a PhD and 2 years.
  • An additional 4 years of experience will be considered in lieu of education/degree.
• Demonstrated work experience in Cyber Threat Analytics.
• Experience working in Cyber Intelligence requiring, at minimum, a moderate technical acumen.
• U.S. citizenship required.
• Active Public Trust is required.
• Willingness and ability to travel 10-25%.

Preferred Qualifications:

• Experience with Network Defense.
• Experience with MITRE Attack Framework.
• Experience with intrusion detection and prevention, incident response, log analysis and monitoring.
• Experience conducting Cyber Fusion Analysis.
• Experience with tools related to Vulnerability Scanning, Penetration Testing, Incident Management.
• Experience researching classified databases.

Salary

$66,000 - $106,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual's experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.

EEO

Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.