Cyber Threat Team Lead — DoD Cyber Operations

Peraton; Linthicum (MD); On-site; USD 112,000 - 179,000; Full time

Job summary

Peraton, located in Linthicum, MD, seeks a Cyber Threat Team Lead to guide a skilled group of analysts conducting cyber investigations, forensics, and threat analysis in support of a DoD customer.

You will oversee threat reporting, OSSI research, and delivery of briefs to government stakeholders, leveraging MITRE ATT&CK knowledge and SIEM tools. A Secret or higher clearance is preferred, with leadership experience valued.

Qualifications

• Experience researching in classified and commercial databases and producing written products showing APT pattern analysis.
• Experience with SIEM technologies.
• Knowledge of MITRE ATT&CK, Cyber Kill Chain, and APTs/TTPS.
• Experience with DoD Cyber Operations.
• Experience with Jira or ServiceNow.
• Excellent verbal and written communication; self-motivated with attention to detail.
• Active Secret clearance (TS/SCI preferred).
• 6 years of relevant experience; leadership experience is a plus.

Responsibilities

• Conduct periodic performance check-ins with team.
• Conduct final reviews of threat reports.
• Lead a small team of cyber analysts.
• Monitor JIRA for various tickets and respond/assign as needed.
• Compose cyber reports for Defense Industrial Base partners.
• Conduct open-source research of indicators of compromise using common threat vendor tools.
• Analyze threat data and provide updates to government stakeholders.
• Provide cyber threat briefs and feedback during dry-run reviews.

Skills

APT pattern analysis

SIEM technologies

Threat intelligence

Jira/ServiceNow

Communication skills

Leadership

DoD Cyber Operations

Tools

Jira

ServiceNow

Job description

Peraton, located in Linthicum, MD, seeks a Cyber Threat Team Lead to guide a skilled group of analysts conducting cyber investigations, forensics, and threat analysis in support of a DoD customer.

You will oversee threat reporting, OSSI research, and delivery of briefs to government stakeholders, leveraging MITRE ATT&CK knowledge and SIEM tools. A Secret or higher clearance is preferred, with leadership experience valued.