Cyber Threat Analyst Level 3

Qualifications

• Ten (10) years of experience with security operations, network forensics, insider threat.
• Bachelor’s degree in computer science, information systems, international relations, or other related field.
• Experience with XKS creating general queries, fingerprinting, and identifying atypical events.
• Experience with Elastic/Splunk/ or other Security Information and Event Management (SIEM) experience creating visualizations and dashboards.
• Understanding of TCP/IP communication protocols and packet flows based on IP traffic; analysis of Packet Capture (PCAP) traffic in Wireshark.
• Familiarity writing signatures in Zeek and/or Snort.

Required Skills

• Must have a bachelor’s degree in computer science, information systems, network forensics or other data analysis roles.
• Ten (10+) years’ experience working in the areas of intelligence, information security, network forensics, insider threat or security operations.
• Specific understanding of key global areas of interest that pose threats to U.S. critical systems as well as an understanding of Advanced Persistent Threats (APTs), cyber actor motives and actions in depth.
• Experience with reporting and IC analyst knowledge resources.
• Experience with Elastic/Splunk or other Security Information and Event Management (SIEM) as well as experience creating visualizations and dashboards.
• Exceptional ability to analyze, correlate, and synthesize threat data from diverse sources.
• Ability to work with development teams and articulate requirements/enhancements to capabilities and tools.
• Ability to perform log file analysis including creating threat intelligence reports that indicate findings, mitigations, and confidence.
• Vast experience fanning advanced analytics, network diagrams, and other forms of associated knowledge to further understand systems, networks, environments, and adversaries.
• Document findings and create detailed reports to ensure tradecraft is continually updated.
• Present results to technical and non-technical stakeholders

Education & Experience Requirements

• Must have a bachelor’s degree in computer science, information systems, network forensics or other data analysis roles.
• Ten (10+) years’ experience working in the areas of intelligence, information security, network forensics, insider threat or security operations.