Senior Cyber Threat Analyst: Attribution & IC Reporting

Intelligence and National Security Alliance; Huntsville (AL); On-site; USD 87,000 - 198,000; Full time

Job summary

Booz Allen Hamilton in Huntsville, AL seeks a Senior Cyber Threat Analyst to support attribution and identification of adversary infrastructure, and to provide technical support to field offices and partner agencies.

You will analyze NetFlow data, develop IOCs, feed IC reporting, and collaborate with law enforcement and IC peers to enhance threat understanding. Applicants must have TS/SCI clearance and 8+ years in cybersecurity/IT.

Qualifications

• 8+ years of experience in cybersecurity or IT.
• Knowledge of Advanced Persistent Threats.
• Ability to use NetFlow traffic to identify malicious behavior.
• Ability to identify APT traffic and enrich IOCs via IC reporting and databases.
• Ability to analyze network traffic data for anomalous or malicious content with tools.
• Ability to use verbal and written expertise to craft and deliver briefings.
• Ability to think and work independently with minimal supervision.
• HS diploma or GED.

Responsibilities

• Support attribution and identification of new adversary infrastructure.
• Engage with US partner agencies and document findings.
• Provide technical support to client field offices and intelligence partner agencies.
• Feed IC reporting derived from raw packet capture or NetFlow analysis.
• Collaborate with law enforcement, counterintelligence, and IC peers to enhance threat understanding.

Skills

TS/SCI clearance

8+ years cybersecurity/IT

APT knowledge

NetFlow analysis

IOC enrichment

Briefing skills

Independent work

Windows & UNIX

Threat reporting

Education

HS diploma or GED

Tools

Kibana

Elasticsearch

Python

NetFlow tools

Job description

Booz Allen Hamilton in Huntsville, AL seeks a Senior Cyber Threat Analyst to support attribution and identification of adversary infrastructure, and to provide technical support to field offices and partner agencies.

You will analyze NetFlow data, develop IOCs, feed IC reporting, and collaborate with law enforcement and IC peers to enhance threat understanding. Applicants must have TS/SCI clearance and 8+ years in cybersecurity/IT.