Senior Threat-Warning Analyst with Secret Clearance

Calnet; Fort Bragg (NC); On-site; USD 110,000 - 160,000; Full time

Benefits offered by this job

Medical, dental, vision insurance

Life insurance

Short-term disability

Long-term disability

401(k) retirement plan

Generous leave time

Job summary

CALNET, Inc. seeks a Senior Threat-Warning Analyst to support USARC - Defensive Cyberspace Operations at Fort Bragg, NC. The role focuses on proactive cyber threat intelligence to inform Blue Team priorities, threat hunting, and signature development across host and network defenses.

Candidates must hold US citizenship and a Secret clearance with 5+ years in IT infrastructure. The position involves analyzing OSINT and threat feeds, producing TIRs and IRCs, and working within an isolated lab for

Qualifications

• Bachelor’s Degree in an IT field preferred
• U.S Citizenship and Secret Clearance is required.
• 5+ years’ IT Infrastructure experience

Responsibilities

• Conduct persistent collection, aggregation, and analysis of OSINT, commercial threat feeds, ISAC reporting, community intelligence reporting, and Government-Furnished Intelligence to identify threats relevant to supported networks.
• Identify exploits, zero-day vulnerabilities, and adversary TTPs requiring DCO action; integrate findings into detection capabilities (host-based security, IPS/IDS, SIEM).
• Develop, test, and recommend host-based and network-based signatures (YARA, Snort, Suricata, Elastic detection logic) and coordinate submissions with ARCYBER portal.
• Correlate internal sensor data and incident reports against threat reporting to identify campaign patterns and adversary activity; conduct threat hunts.
• Provide tactical DCO integration support; integrate sensor events and analysis into DCO processes for rapid threat response.
• Develop and maintain a DCO test lab (isolated network) for malware analysis and OSINT collection.
• Produce Threat Intelligence Reports, IOC packages, and trend analyses; manage IR requirements for supported command.

Skills

US Citizenship

IT Infrastructure

Bachelor's Degree

Education

Bachelor’s Degree in IT

Tools

YARA

Snort

Suricata

Elastic

Job description

Founded in 1989, CALNET, Inc. has become one of the fastest growing privately held companies in the Technology, Intelligence Analysis, and Language Services consulting arena. Headquartered in Reston, VA, CALNET employees deliver true value to our customers by employing best practices, world-class technologies industry expertise in every project. CALNET is ISO 9001, ISO 20000, and CMMI-Level III certified

For a USARC - Defensive Cyberspace Operations opportunity, we are currently searching for a talentedSenior Threat-Warning Analyst in Fort Bragg, NC

About the Job

This position provides proactive CTI support to inform Blue Team detection priorities, drive assessment scoping, prioritize remediation effort, and deliver finished intelligence products to supported commanders, the supported RCC, and ARCYBER. CTI operations shall integrate classified and open-source reporting consistent with the analyst's cleared access (historical baseline: 6–10 daily cyber threat reports analyzed; approximately 1,300 sensor-grid signatures reviewed, activated, modified, or deactivated monthly). This position validates proposed signatures for proper syntax and minimal false positives prior to deployment; all development and signature testing shall be conducted on isolated networks.

Job Requirements

• Conduct persistent collection, aggregation, and analysis of OSINT, commercial threat feeds, ISAC reporting, community intelligence reporting, and Government-Furnished Intelligence (GFI) to identify emerging threats relevant to supported networks.
• Conduct open-source research to identify commercial exploits, zero-day vulnerabilities, and adversary TTPs requiring DCO action, and integrate findings into the supported environment's detection capability (host-based security, IPS/IDS, SIEM).
• Develop, test, and recommend host-based and network-based signatures (YARA, Snort, Suricata, Elastic detection logic, custom host-based policies) based on identified adversary tradecraft, and coordinate signature submissions with the ARCYBER signature working group portal for global standardization.
• Correlate internal sensor data and incident reports against classified and open-source threat reporting to identify campaign patterns and persistent adversary activity, and conduct hypothesis-driven and indicator-based threat hunt missions.
• Provide tactical DCO integration support when directed, integrating tactical network sensor events and signature analysis into the supported RCC's DCO processes and enabling tactical units to detect, identify, and respond to threats on their networks.
• Develop and maintain a DCO test lab using a Government-approved commercially leased connection (isolated from NIPRNet) for malware analysis and OSINT collection.
• Produce and disseminate Threat Intelligence Reports (TIR), Indicator of Compromise (IOC) packages, Request for Information (RFI) responses, and trend analyses; maintain a current intelligence requirements (IR) management process aligned to the supported command's requirements and higher Army echelons.
• Document and conduct annual test plans for the CTI signature-development pipeline (or as signatures are developed/updated) and conduct monthly DCO-specific internal training, maintaining a Program of Instruction (POI), attendee list, and After-Action Reports (AAR).

Required Skills

• Bachelor’s Degree in an IT field preferred
• U.S Citizenship and Secret Clearance is required.
• 5+ years’ IT Infrastructure experience

This opportunity is inFort Bragg, NC

CALNET, Inc. offers a competitive salary and a generous benefits package. This package includes medical, dental, vision, life, short- and long-term disability insurances, a 401(k)-retirement savings plan, and generous leave time.

CALNET, Inc. is an Equal Opportunity Employer. EEO/M/F/D/V