Cyber Threat Analyst (I&W) — Splunk/Analyst1 Expert

Peraton; Arlington (VA); On-site; USD 104,000 - 166,000; Full time

Job summary

Peraton is seeking a Cyber Threat Analyst (I&W) with Splunk SIEM and Analyst1 experience for our Federal Strategic Cyber Programs. The role requires an active Top Secret/SCI clearance and travel up to two weeks at a time, domestically and abroad.

You will be part of the Indications and Warnings team, tracking APT activity and correlating threat intel with internal events to identify vulnerabilities. This is an on-site role located in Northern VA with potential travel.

Qualifications

• Bachelor's degree required with 9 years of relevant experience; 4 additional years may substitute for degree.
• Experience with Splunk SIEM and Analyst1 threat intelligence platform.

Responsibilities

• Be part of the Indications and Warnings team.
• Track APT activity using open-source, vendor, and classified reports.
• Perform pattern, trend, and behavior analyses to identify malicious activity targeting DOS information, systems and personnel.
• Identify IOCs on an Enterprise network using SIEM and logs.
• Liaise with the Intelligence Community and act as fusion analysis cell within CTAD.
• Monitor geopolitical developments and threats impacting cyber threat landscape.
• Author and present cyber threat-focused analyses to technical and non-technical audiences.
• Correlate threat intelligence with internal security events to identify patterns and vulnerabilities.

Skills

Analytical thinking

Threat intelligence

Independent work

Team collaboration

Written communication

Education

Bachelor's degree

Tools

Splunk

Analyst1

Job description

Peraton is seeking a Cyber Threat Analyst (I&W) with Splunk SIEM and Analyst1 experience for our Federal Strategic Cyber Programs. The role requires an active Top Secret/SCI clearance and travel up to two weeks at a time, domestically and abroad.

You will be part of the Indications and Warnings team, tracking APT activity and correlating threat intel with internal events to identify vulnerabilities. This is an on-site role located in Northern VA with potential travel.