DCISE Technical Lead

ANALYGENCE; Linthicum (MD); On-site; USD 120,000 - 160,000; Full time

Job summary

ANALYGENCE is seeking a DCISE Technical Lead in Linthicum, Maryland. The position involves providing technical oversight for DCISE operations at the DoD Cyber Crime Center, leading a team of cyber threat analysts, and ensuring the quality and timeliness of analytical products. Candidates should have at least 10 years of experience in cyber analysis and a current Top Secret/SCI clearance eligibility. This role offers an opportunity to guide critical cybersecurity operations.

Qualifications

• Active Top Secret/SCI clearance eligibility is required.
• Over 10 years of experience leading technical efforts in cyber analysis and reporting.
• Experience with scanning tools like VirusTotal for suspicious file scanning.

Responsibilities

• Provide technical oversight and guidance on all DCISE tasks.
• Supervise team of cyber threat analysts and partner engagement specialists.
• Manage quality, timeliness, and accuracy of all DCISE deliverables.

Skills

Technical oversight

Team supervision

Threat analysis

Education

TS/SCI clearance eligibility

10 years of technical leadership in intelligence analysis

Tools

VirusTotal

Threat intelligence platforms

Job description

Tharros is seeking a DCISE Technical Lead to serve as the project lead for all Defense Industrial Base Collaborative Information Sharing Environment (DCISE) operations at the DoD Cyber Crime Center (DC3). This position provides technical oversight and guidance across five DCISE task areas and serves as the contractor representative to DCISE executive leadership.

The Technical Lead will direct a team of cyber threat analysts and intelligence professionals who produce approximately 1,600 analytical products per year, conduct malware triage and analysis, manage partner engagement, and operate sensor platforms.

Responsibilities

• Provide technical oversight and guidance on all DCISE tasks, including threat analysis, partner engagement, and analytical product development
• Serve as the contractor representative to DCISE executive leadership
• Supervise a team of cyber threat analysts, cyber intelligence analysts, and partner engagement specialists producing all‑source cyber analytical products
• Direct malware triage, suspicious file scanning, indicator pivoting, and network analysis operations
• Oversee intelligence analysis processes including OSINT and closed‑source intelligence gathering, source verification, data fusion, link analysis, and threat actor profiling
• Manage the quality, timeliness, and accuracy of all DCISE deliverables
• Support financial and business process management for DCISE tasks, excluding inherently governmental functions
• Coordinate with DIB partners on cyber threat information sharing, incident response, and vulnerability mitigation
• Contribute to the development and maintenance of DCISE SOPs and analytical tradecraft standards

Qualifications

• Active Top Secret/SCI clearance eligibility
• 10 years of experience leading technical efforts supporting intelligence analysis requirements in all‑source cyber analysis and reporting
• 10 years of experience supervising teams supporting intelligence analysis requirements in all‑source cyber analysis and reporting
• 10 years of experience with scanning tools (e.g., VirusTotal) to conduct suspicious file scanning, and performing queries, pivoting on indicators, and malware analysis on characteristics (MD5, SHA1, file size, file name, file paths)
• 10 years of experience with intelligence analysis processes, including OSINT and closed‑source intelligence gathering, source verification, data fusion, link analysis, and threat actor knowledge
• 10 years of experience conducting malware and network analysis, identifying protocols, persistence mechanisms, encoding techniques, and encryption and how they are used by Advanced Persistent Threat (APT) actors

Preferred Qualifications

• Prior DCISE, CISA, or DC3 operational experience
• Experience with DIB cybersecurity programs and 32 CFR Part 236 mandatory/voluntary reporting requirements
• Familiarity with threat intelligence platforms (CrowdStrike, Intel 471, Recorded Future, or equivalent)
• GIAC certifications (GCTI, GREM, GCIH) or equivalent technical credentials
• Experience producing finished intelligence products under IC analytic standards