Cybersecurity Threat Analyst

BreakPoint Labs, LLC; Dayton (OH); On-site; USD 75,000 - 110,000; Full time

Job summary

BreakPoint Labs, LLC is seeking a Cybersecurity Analyst to perform advanced analysis of adversary tradecraft, malicious code, and capabilities for cyber programs.

Responsibilities include handling warning intelligence, performing initial analyses, and sharing information with end customers. The role requires familiarity with DoD policies, Python, Bash, and Git, and a DoW Secret clearance with potential Top Secret eligibility.

Qualifications

• Bachelor’s degree required in cybersecurity or related field.
• Familiarity with warning intelligence and cyber threat concepts.
• Programming in Python, bash scripting, and Git usage.

Responsibilities

• Receive and act on warning intelligence from defense and intelligence sources.
• Perform initial analysis on warning intelligence information.
• Share warnings, notes, and reports with end customers.
• Identify potential impact to operations from warning intelligence.

Skills

Networking concepts

DoD policies

Python

Bash

GIT

Education

Bachelor’s Degree in Cybersecurity

Job description

BreakPoint Labs is seeking a Cybersecurity Analyst to perform advanced analysis of adversary tradecraft, malicious code, and capabilities for cyber programs.

Responsibilities include:

• Receive and take initial action on warning intelligence information received from intelligence organizations
• Perform preliminary analysis on warning intelligence information
• Share warning intelligence notifications, notes, reports, and information with end customers.
• Identify potential impact to end customer operations through analysis of warning intelligence information
• Analyze intelligence reports, forensic reports, and reverse engineering of malware reports to determine associated indicators of compromise (IOCs) and utilize the IOCs to develop and distributes countermeasures to detect and prevent identified threats.
• Evaluate IOCs derived from incidents to determine association with known computer network exploitation (CNE) groups and thoroughly investigate the IOCs for other infrastructure possibly related to the CNE teams (domain registrations, IP ownership, VPN infrastructure, strains of malware, etc) for consideration of additional proactive defensive measures.
• Share cyber intelligence with peer DCO organizations and end customers.
• Develop and distribute countermeasure to prevent/mitigate potential cyber event impacts to networks and information systems
• Share countermeasures or interim guidance to prevent/mitigate cyber event impacting networks and information systems with peer DCO organizations and end customers.

Required Experience:

• Familiarity with networking concepts
• Familiarity with DoD and Army policies and procedures
• Python, bash, GIT

Required Certifications: Security+ Continuing Education (CE) [CompTIA]

Required Security Clearance: DoW Secret Clearance, but have the capability to be clearable up to the Top Secret level

Required Education Level: Bachelor’s Degree in the Area(s) of Study – Cybersecurity