Cyber Threat Analyst Level 2

Qualifications

• Seven (7) years of experience with security operations, network forensics, insider threat.
• Bachelor’s degree in computer science, information systems, international relations, or other related field.
• Experience with XKS creating general queries, fingerprinting, and identifying atypical events.
• Experience with Elastic/Splunk/ or other Security Information and Event Management (SIEM) experience creating visualizations and dashboards.
• Understanding of TCP/IP communication protocols and packet flows based on IP traffic; analysis of Packet Capture (PCAP) traffic in Wireshark.
• Familiarity writing signatures in Zeek and/or Snort.

Required Skills

• Must have a bachelor’s degree in computer science, information systems, network forensics or other data analysis roles.
• Three (3+) years’ experience working in the areas of intelligence, information security, network forensics, insider threat or security operations.
• Research OSINT and current world event trends; correlate and translate vulnerabilities across supply chain, defense industrial base and other critical system areas of interest.
• Able to translate knowledge, findings and recommendations to the classified environment.
• Able to analyze, correlate, and synthesize threat data from diverse sources.
• Able to work with a team of analysts and developers to articulate enhancements to capabilities and tools.
• Document findings, create detailed reports, and present results to technical and non-technical stakeholders.