Cyber Threat Analyst — Splunk & I&W Focus

Peraton; Arlington (VA); On-site; USD 104,000 - 166,000; Full time

Job summary

Peraton in Arlington, VA is seeking a Cyber Threat Analyst (I&W) with Splunk SIEM and Analyst1 experience to support Federal Strategic Cyber Programs. This on-site role requires travel up to two weeks at a time and a US passport with Top Secret/SCI eligibility.

The analyst will track APT activity, correlate IOCs, and produce threat analyses for policymakers and security practitioners, using MITRE ATT&CK and other threat models to guide defense measures.

Qualifications

• Bachelor's degree and 9 years of experience; 7 years with Masters. An additional 4 years of experience may be substituted in lieu of the bachelor's degree requirement.
• Must possess and maintain, or obtain prior to start date, one of the following professional certifications: CASP+ CE, CCNP Security, CEH, CFR, CHFI, CISA, CISSP (or Associate), Cloud+, CND, CySA+, GCED, GCIH, GICSP, SSCP.
• Must have experience with Splunk SIEM and Analyst1 threat intelligence platform.
• Must have demonstrated experience in cyber threat intelligence with specific knowledge of APT actors and their operations
• Experience leveraging the MITRE ATT&CK matrix or other threat models (e.g. Lockheed Martin Kill Chain, Diamond Model).
• Knowledge or experience tracking advanced persistent threats (APTs). Knowledge or experience pivoting from IOCs to identify related infrastructure.
• Active U.S. Passport and the ability to travel up to two weeks at a time, both foreign and domestically.
• U.S citizenship required.
• An active Secret security clearance with Top Secret SCI eligibility.

Responsibilities

• Be a key part of the Indications and Warnings team.
• Leverage open-source, proprietary/vendor, and classified reporting to closely track advanced persistent threat actor activity.
• Perform pattern, trend, and behavior analysis, as well as other specialized analysis techniques to identify malicious cyber threat activity targeting DOS information, systems and personnel.
• Maintain records to catalog and track malicious cyber threat activity targeting DOS information, systems and personnel.
• Identify Indicators of Compromise (IOCs) present on an Enterprise network through the use of a SIEM and other security tools and logs.
• Liaise with members of the Intelligence Community (IC).
• Acts as the fusion analysis cell within Cyber Threat Analysis Division (CTAD).
• Monitor geopolitical developments, emerging technologies and threats to assess their impact on the cyber threat landscape.
• Author and present on short notice cyber threat-focused analyses to technical and non-technical audiences including policymakers and security practitioners.
• Correlate threat intelligence with internal security events to identify patterns and potential vulnerabilities
• Role will require up to 10% travel to foreign and domestic locations.

Skills

Splunk SIEM

Threat intelligence analysis

Education

Bachelor's degree

Tools

Analyst1 platform

Job description

Peraton in Arlington, VA is seeking a Cyber Threat Analyst (I&W) with Splunk SIEM and Analyst1 experience to support Federal Strategic Cyber Programs. This on-site role requires travel up to two weeks at a time and a US passport with Top Secret/SCI eligibility.

The analyst will track APT activity, correlate IOCs, and produce threat analyses for policymakers and security practitioners, using MITRE ATT&CK and other threat models to guide defense measures.