Intrusion Analyst (Levels I-III) - TS/SCI w/ Poly

BTS Software Solutions; San Antonio (TX); On-site; USD 100,000 - 190,000; Full time

Benefits offered by this job

Health benefits

PTO

401K matching

Job summary

BTS Software Solutions seeks an Intrusion Analyst to perform technical analysis and identify indicators of compromise in support of customer operations. Primary Location: Annapolis Junction, MD.

Responsibilities include malware analysis, metadata analysis, and documenting TTPs to inform mitigation across multiple deployments. Strong background in malware analysis and network defense is required along with relevant certifications.

Qualifications

• Degree in CS/Engineering/IS from an accredited college.
• CISSP, GIAC GREM or CREA certifications are preferred or required by level.
• Experience in malware analysis or related cybersecurity fields is preferred.
• Programming experience in C, C++, Java, Perl, or Python is preferred.

Responsibilities

• Provide information and documentation enabling malware detection, signature creation, and mitigation.
• Analyze metadata from tasked communications systems to identify targets and report insights.
• Analyze target network data to discover malicious activity using SIGINT and CNA resources.
• Categorize traffic as benign, suspicious, or malicious and document TTPs; develop mitigation strategies.

Skills

Malware analysis

Metadata analysis

Network defense

TTP documentation

Mitigation strategy

Education

Bachelor's degree in Computer Science/Engineering/Information Systems

Associate's degree + 4 years relevant experience

CISSP

GIAC GREM

CREA

Tools

C

C++

C#

Java

Perl

Python

Job description

BTS Software Solutions seeks an Intrusion Analyst to perform technical analysis and identify indicators of compromise in support of customer operations. Primary Location: Annapolis Junction, MD.

Responsibilities include malware analysis, metadata analysis, and documenting TTPs to inform mitigation across multiple deployments. Strong background in malware analysis and network defense is required along with relevant certifications.