Cyber Threat Intelligence Lead

Booz Allen Hamilton; Huntsville (AL); On-site; USD 62,000 - 141,000; Full time

Job summary

Booz Allen Hamilton seeks a Cyber Threat Intelligence Analyst to join a threat intelligence team and analyze emerging cyber threats for client organizations. You will validate threats, support incident detection and signature development, and provide concise intelligence context for remediation strategies.

The role requires 5+ years in cybersecurity, 3+ years in threat research on nation-state or criminal activity, experience with Splunk, and TS/SCI clearance.

Qualifications

• 5+ years of experience with cybersecurity.
• 3+ years of experience conducting threat research focused on nation-state, criminal, or malicious cyber activities.
• Experience with Splunk.
• Experience translating complex cyber events into a narrative for technical and executive audiences.
• Experience with internet technologies, including collaborative internet tools and mapping tools.
• Experience with computer network protocols and operations.
• Knowledge of cyber intrusion vectors, malware, networking, and monitoring.
• Knowledge of threat intelligence tradecraft, including structured analytic, contrarian, and imaginative analytic techniques.
• Top Secret clearance.
• Bachelor's degree.

Responsibilities

• Conduct highly detailed security threat analysis and validate threats for clients.
• Support incident detection, response operations, and signature development.
• Provide intelligence context to fine-tune detection signatures.
• Engage teammates for assistance and review findings.
• Prepare concise analytical products for technical and executive audiences.

Skills

Cybersecurity

Threat research

Analytical writing

Threat intel

Internet concepts

Networking protocols

Threat intel tradecraft

Open-source tools

Education

Bachelor's degree

Tools

Splunk

Python

SQL

C++

PHP

Perl

Java

SIEM

Job description

Booz Allen Hamilton seeks a Cyber Threat Intelligence Analyst to join a threat intelligence team and analyze emerging cyber threats for client organizations. You will validate threats, support incident detection and signature development, and provide concise intelligence context for remediation strategies.

The role requires 5+ years in cybersecurity, 3+ years in threat research on nation-state or criminal activity, experience with Splunk, and TS/SCI clearance.