Threat Intel Platform Integrations Lead

Leidos; Whitehall (OH); In loco; USD 87.000 - 157.000; Tempo pieno

Descrizione del lavoro

Leidos' Digital Modernization sector is seeking an experienced Cyber Threat Intelligence professional to own the Threat Intelligence Platform integration and sustain CTI fusion across DISA capabilities. This role supports DoW/DoWIN initiatives with on-site requirements at Scott AFB, Hill AFB, or Columbus, OH, with partial hybrid telework possible.

You will integrate CTI feeds, develop zero-fault defending actions, and craft high-impact papers for senior government officials, while using Python,

Competenze

• Must have active TS/SCI clearance.
• Bachelor's degree in a related discipline and 4+ years of directly relevant experience; additional related years of experience accepted in lieu of a degree.
• 2+ years of experience with Threat Intelligence Platforms (TIPs) and configuring threat feed integrations.
• Proficiency in Python.
• Experience with JSON and YAML configuration editing.
• Experience with Git version control.
• Knowledge of CBII, Palo Alto, ERS, Versa integrations in enterprise environments.
• 8140 Cyber Defense Infrastructure Support Specialist 521 (CS) Intermediate-level compliance with Security+, PenTest+, CySA+, GSEC, or GMON.

Mansioni

• Act as the mission owner for sustained Threat Intelligence Platform support, driving CTI fusion and integration of blocking capabilities.
• Maintain and enhance capability performance by integrating threat feeds across DISA capabilities (CBII, Palo Alto, ERS, Versa).
• Integrate block lists to support automated defensive solutions (Bladeguard).
• Fuse multiple intelligence sources to develop products, provide strategic recommendations, and prioritize focus.
• Research and investigate current threats; map adversary activities using MITRE ATT&CK.
• Analyze data and threat reports to evaluate adversary capabilities, intentions, tactics, and behaviors.
• Produce papers, presentations, and recommendations for senior U.S. government officials.
• Support government and CSWOs in IOC management, blocking, and troubleshooting.

Conoscenze

Python

JSON

YAML

Git

TIPs

TS/SCI clearance

Formazione

Bachelor's degree or related discipline

Strumenti

CBII

Palo Alto

ERS

Versa

Descrizione del lavoro

Leidos' Digital Modernization sector is seeking an experienced Cyber Threat Intelligence professional to own the Threat Intelligence Platform integration and sustain CTI fusion across DISA capabilities. This role supports DoW/DoWIN initiatives with on-site requirements at Scott AFB, Hill AFB, or Columbus, OH, with partial hybrid telework possible.

You will integrate CTI feeds, develop zero-fault defending actions, and craft high-impact papers for senior government officials, while using Python,