Threat Intelligence Analyst (Sr., Jr. Multiple Roles)

Fabergent; Herndon (VA); On-site; USD 110,000 - 140,000; Full time

Job summary

A cybersecurity firm is looking for a Threat Intelligence Analyst to develop models for identifying cybersecurity threats, analyze incident logs, and guide junior analysts. Candidates must have 6-8+ years of relevant experience and a Bachelor's degree in a related field. This role also requires strong statistical analysis skills and familiarity with networking protocols. The position involves collaboration with team members in a fast-paced environment, with some shift work expected.

Qualifications

• 6+ years of relevant experience for E04 role
• 8+ years of relevant experience for E05 role
• Experience with cybersecurity threats analysis
• Researches Internet sources and threat intelligence feeds and try to find evidence in customer logs.
• Explores patterns in network and system activity through log correlation using Splunk and other tools.
• Investigates evidence of threats against Windows, Linux, Databases, Applications, web servers, firewalls or other relevant technologies.
• Tests models by injecting indicators.
• Share IOC models with trusted parties for validation and collaboration.
• Guide junior threat analysts.
• Support shift work (1st, 2nd, or 3rd shift) as assigned

Responsibilities

• Develop models for identifying incident-type activity using statistical analysis
• Review incident logs for patterns
• Research Internet sources and threat intelligence feeds
• Explores patterns in network and system activity through log correlation using Splunk and other tools
• Investigates evidence of threats against Windows, Linux, Database, Applications, web servers, firewalls or other relevant technologies
• Tests models by injecting indicators
• Share IOC models with trusted parties for validation and collaboration.
• Guide junior threat analysts.
• Support shift work (1st, 2nd, or 3rd shift) as assigned

Skills

Statistical modeling and analysis

Verbal/written communication skills

Interest in programming skills

Digital analysis and forensics

Knowledge of networking protocols

Databases

Web servers

Written communication

Self-start

Teamwork

Education

Bachelor of Science Degree in Computer Science or related field

Tools

Splunk

MS Excel

Encase

Palantir

FTK

Job description

Threat Intelligence Analyst (Sr., Jr. Multiple Roles)

• Full-time

Regardless of the size of your HR staff, it always feels like you’re spending too much time searching for qualified candidates and reviewing resumes. We meet our clients’ IT staffing challenges by leveraging the collective experience and expertise of our recruitment team and consultant base.

Description:

The ideal candidate for this job will be an experienced information security practitioner who is goal-oriented and strives to exceed expectations.

Salary based on the candidate’s qualifications as they relate to the skills, experience and responsibility requirements for the position.

What you’ll be responsible for:

• Develops models for identifying incident-type activity, of malware or bad actors, using statistical analysis
• Reviews incident logs/records mining for patterns
• Researches Internet sources and threat intelligence feeds and try to find evidence in customer logs
• Explores patterns in network and system activity through log correlation using Splunk and other tools
• Investigates evidence of threats against Windows, Linux, Database, Applications, web servers, firewalls or other relevant technologies
• Tests models by injecting indicators
• Share IOC models with trusted parties for validation and collaboration.
• Guide junior threat analysts.
• Support shift work (1st, 2nd, or 3rd shift) as assigned

What’s Required:

• Must be eligible to obtain a sensitive clearance – Position of Public Trust – and may be required to obtain a higher security clearance
• 6+ years of relevant work experience for an E04
• 8+ years of relevant work experience for an E05
• Statistical modeling and analysis experience to infer possible cybersecurity threats
• Experience in analysis in investigations, such as in IT, law enforcement, military intelligence, or business analytics
• Knowledge of networking protocols
• Interest in learning about Windows, Linux, Database, Application, Web server, firewall, SIEM etc. log analysis
• Verbal/written communication and interpersonal skills to effectively communicate with team-members
• Must be highly motivated with the ability to self-start, prioritize, multi-task and work in a team setting
• Digital analysis and forensics experience using Encase, Palantir, i2 Analyst’s Notebook, FTK or similar tools or extensive statistical analysis tool experience (including extensive use of MS Excel)

What you’ll need:

• Demonstrable interest in learning SQL and shell scripting
• Demonstrable interest in learning some programming skills
• Familiarity with common network vulnerability/penetration testing
• Experience with testing automation suites such as Selenium
• Experience evaluating systems and network devices and enterprise networks for IA vulnerabilities
• Experience evaluating enterprise networks for IA/security vulnerabilities
• Experience on an Incident Response team performing Tier I/II initial incident triage.
• Excellent writing skills

Required Education:

Bachelor of Science Degree with a major in Computer Science/Computer Engineering, Engineering, Science or a related field. Two years of related work experience may be substituted for each year of degree-level education.

Desired Certifications:

DODI 8570.1-M Compliance at IAT LevelII;CISSPPreferred

Certified Ethical Hacker (C EH), SFCP, GCIA

Clearance Type Required:

Public Trust Current

Expertise:

• Cyber Jobs
• Information and Knowledge Systems

All your information will be kept confidential according to EEO guidelines.