Threat Analyst

Stellent IT LLC; Huntsville (AL); On-site; USD 110,000 - 150,000; Full time

Job summary

Stellent IT LLC in Huntsville, Alabama seeks a Threat Analyst for a permanent onsite role. Active TS/SCI clearance with CI poly eligibility is required. This is a full-time position offering opportunities to monitor networks, analyze threats, and contribute to incident response.

You will work with government partners, produce detailed reporting, and develop automation to strengthen defenses. Strong MITRE ATT&CK knowledge and threat intelligence experience are essential.

Qualifications

• Active TS/SCI clearance with ability to obtain CI poly.
• BS or BA degree required.
• Background as intel analyst preferred.
• 8+ years of experience, including Splunk Enterprise Security (ES).

Responsibilities

• Monitor networks for security issues, investigate breaches, and analyze cyber threats.
• Collect and analyze threat data to identify threats and vulnerabilities.
• Participate in real-time cyber defense and assist in investigations.
• Prepare detailed reports and advisories with actionable recommendations.
• Collaborate with divisions, agencies, and partners to address threats.
• Analyze malware to identify TTPs and lifecycle of campaigns.
• Develop tools and automation to enhance threat intelligence capabilities.
• Stay updated on latest threats and best practices.

Skills

Threat intelligence frameworks (MITRE/

Education

BS or BA degree

Tools

Splunk Enterprise Security

Microsoft Sentinel

GIAC Cyber Threat Intelligence (GCTI)

Job description

Threat Analyst

Huntsville, Alabama(Onsite)

Video Interview

Full Time role

JD:

We have a permanent position in either Huntsville, AL for a threat analyst. You must have an active TS/SCI to apply and be able to obtain a CI poly if you do not have one.

Responsibilities

• Monitoring and Analysis:

  Continuously monitor computer networks for security issues, investigate security breaches, and analyze cyber threats.

• Threat Intelligence:

  Collect and analyze threat data from various sources, including open-source intelligence, dark web monitoring, and internal data, to identify potential threats and vulnerabilities.

• Incident Response:

  Participate in real-time cyber defense activities, supporting incident response teams and contributing to the investigation of cybercrimes.

• Reporting and Documentation:

  Prepare detailed reports and advisories, including actionable recommendations, for internal and external stakeholders.

• Collaboration:

  Work closely with other divisions, government agencies, and potentially international partners to address cyber threats.

• Malware Analysis:

  Analyze malware samples to identify active techniques, track campaigns, and understand attacker tactics, techniques, and procedures (TTPs).

• Tool Development:

  May develop tools and automation to enhance the team's capabilities in threat intelligence and analysis.

• Staying Updated:

  Keep abreast of the latest cyber threats, vulnerabilities, and security best practices.

Cybersecurity Expertise

• Strong understanding of cybersecurity principles, network security, endpoint security, and cloud security.
• Threat Intelligence Knowledge:

  Familiarity with cyber threat intelligence frameworks (e.g., MITRE ATT&CK, Cyber Kill Chain), threat intelligence platforms, and data analysis techniques.

Analytical and Problem-Solving Skills

Ability to analyze complex data, identify patterns, and develop solutions to cyber security challenges.

Communication Skills

Excellent written and verbal communication skills to produce clear, detailed reports and deliver compelling presentations.

Collaboration Skills

Ability to work effectively with cross-functional teams and stakeholders.

Experience

Several years of relevant experience in cyber threat intelligence, cybersecurity, or a related field is typically required

Required Skills:

• Clearance: Top Secre t with the ability to sit for the CI Poly
• Requires BS or BA degree
• Should have more an intel analyst background
• 8 year overall experience to include experience with Splunk Enterprise Security (R)

Preferred Skills:

Having the following tools experience and/or certifications:

• Microsoft Sentinel (P)
• GIAC Cyber Threat Intelligence (GCTI)