Cyber Threat Intelligence Analyst

System One; Huntsville (AL); On-site; USD 110,000 - 160,000; Full time

Job summary

System One in Huntsville, AL is seeking a Cyber Threat Intelligence Analyst to monitor threats, investigate incidents, and produce in-depth reports for internal and client stakeholders.

You will collect data from open sources, dark web monitoring, and internal feeds; analyze malware and TTPs; develop automation to expand defenses; and present findings to cross-functional teams. TS clearance or ability to obtain CI poly required.

Qualifications

• Top Secret clearance with ability to obtain CI Poly.
• 8+ years of overall experience including intelligence analyst background.
• Experience with Splunk Enterprise Security.
• Experience with Threat Hunting.
• Knowledge of Threat Actors, MITRE Framework, TTPs, and IOCs.
• Experience with Microsoft Sentinel and writing intelligence reports.
• Strong understanding of cyber threat intelligence principles and frameworks.

Responsibilities

• Monitor and analyze cyber threats, investigate security breaches, and produce reports to enhance cybersecurity posture.
• Collect and analyze threat data from open-source intelligence, dark web monitoring, and internal data to identify threats.
• Participate in real-time cyber defense activities, supporting incident response teams and investigations.
• Prepare detailed reports and advisories, including actionable recommendations for stakeholders.
• Work with divisions, government agencies, and partners to address cyber threats.
• Analyze malware samples to identify techniques and TTPs.
• Develop tools and automation to enhance threat intelligence capabilities.
• Stay abreast of latest cyber threats, vulnerabilities, and best practices.
• Apply network, endpoint, and cloud security principles.
• Utilize MITRE ATT&CK, Cyber Kill Chain, and threat intelligence platforms.

Skills

Threat hunting

Threat intelligence

MITRE ATT&CK knowledge

Report writing

Education

Bachelor's degree

Tools

Splunk Enterprise Security

Microsoft Sentinel

Job description

Cyber Threat Intelligence Analyst

Onsite- Huntsville, Alabama

Responsibilities

• Monitor and analyze cyber threats, investigate security breaches, and produce reports to enhance cybersecurity posture.
• Collect and analyze threat data from various sources, including open-source intelligence, dark web monitoring, and internal data, to identify potential threats and vulnerabilities.
• Participate in real-time cyber defense activities, supporting incident response teams and contributing to the investigation of cybercrimes.
• Prepare detailed reports and advisories, including actionable recommendations, for internal and external stakeholders.
• Work closely with other divisions, government agencies, and potentially international partners to address cyber threats.
• Analyze malware samples to identify active techniques, track campaigns, and understand attacker tactics, techniques, and procedures (TTPs).
• Develop tools and automation to enhance the team's capabilities in threat intelligence and analysis.
• Keep abreast of the latest cyber threats, vulnerabilities, and security best practices.
• Apply strong cybersecurity principles, including network security, endpoint security, and cloud security.
• Utilize cyber threat intelligence frameworks such as MITRE ATT&CK and Cyber Kill Chain, as well as threat intelligence platforms and data analysis techniques.
• Analyze complex data, identify patterns, and develop solutions to cybersecurity challenges.
• Produce clear, detailed reports and deliver compelling presentations.
• Collaborate effectively with cross-functional teams and stakeholders.

Requirements

• Top Secret clearance with ability to obtain CI Poly
• Bachelor's degree or higher (BS or BA)
• More than 8 years of overall experience, including intelligence analyst background
• Experience with Splunk Enterprise Security
• Experience with Threat Hunting
• Knowledge of Threat Actors, MITRE Framework, TTPs, and IOCs
• Experience with Microsoft Sentinel (P) and writing intelligence reports
• Strong understanding of cyber threat intelligence principles and frameworks

System One, and its subsidiaries including Joulé and Mountain Ltd., are leaders in delivering outsourced services and workforce solutions across North America. We help clients get work done more efficiently and economically, without compromising quality. System One not only serves as a valued partner for our clients, but we offer eligible employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan.

System One is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, age, national origin, disability, family care or medical leave status, genetic information, veteran status, marital status, or any other characteristic protected by applicable federal, state, or local law.

#LI-KA1

#M1

Ref: #851-Rockville-S1