Senior Threat Intelligence & NetFlow APT Analyst

Booz Allen Hamilton; Alabama; Vor Ort; USD 87.000 - 198.000; Vollzeit

Zusammenfassung

Booz Allen Hamilton seeks an experienced cybersecurity professional to support technical and operational work for client partner agencies, identifying adversary infrastructure and analyzing NetFlow data to detect malicious activity.

The role involves close collaboration with U.S. partner agencies, enriching IOCs, delivering briefings, and coordinating with law enforcement and IC peers; TS/SCI clearance and a HS diploma are required, with growth and comprehensive benefits offered.

Qualifikationen

• 8+ years of experience in cybersecurity or IT.
• Knowledge of Advanced Persistent Threats (APT).
• Ability to use NetFlow to identify malicious behavior.
• Ability to identify APT traffic and enrich IOCs via IC reporting and databases.
• Ability to analyze network traffic data for anomalous or malicious content with tools.
• Ability to craft and deliver briefings.
• Ability to think and work independently with minimal supervision.
• TS/SCI clearance.
• HS diploma or GED.

Aufgaben

• Support technical and operational work for client partner agencies with attribution and identification of new adversary infrastructure.
• Engage with U.S. partner agencies extensively and document and develop findings.
• Provide technical support to client field offices and other intelligence partner agencies.
• Feed intelligence community reporting derived from raw packet capture or NetFlow analysis.
• Collaborate with law enforcement, counterintelligence, and IC peers to understand cyber threats.

Kenntnisse

NetFlow analysis

APT knowledge

IOC enrichment

Network traffic analysis

Briefings delivery

Independent work

TS/SCI clearance

Ausbildung

HS diploma or GED

Tools

Python

Elasticsearch

Kibana

Jobbeschreibung

Booz Allen Hamilton seeks an experienced cybersecurity professional to support technical and operational work for client partner agencies, identifying adversary infrastructure and analyzing NetFlow data to detect malicious activity.

The role involves close collaboration with U.S. partner agencies, enriching IOCs, delivering briefings, and coordinating with law enforcement and IC peers; TS/SCI clearance and a HS diploma are required, with growth and comprehensive benefits offered.