Cyber Threat Intelligence (Fusion) Analyst - TS/SCI with Polygraph

US Citizenship Required

About the Role

The successful applicant will identify potential cyber threats, determine levels of risk, and produce analytical reports for a variety of audiences. You will occasionally present findings to senior executives, requiring the ability to translate technical indicators into layperson’s terms. When serious threats are identified, you will collaborate with other security team members to develop appropriate solutions. A passion for technology and rapid learning of new security solutions is essential.

Responsibilities

• Obtain Indicators of Compromise (IOCs) through forensic analysis, Open-Source Intelligence (OSINT) review/monitoring, customer-provided and open-source tools, and research on previously reported IOCs.
• Recommend adjustments to countermeasures, both enterprise and tactical, to mitigate threats.
• Discover adversary campaigns, anomalies, and inconsistencies in sensor logs, system logs, SIEMs, and other data; investigate to identify or rule out system compromises.
• Provide written analytic summaries and attack lifecycle visualizations.
• Participate in collaborative sessions with other CNDSPs, IC agencies, and cross-functional teams (Current Operations, Future Operations, Logistics, Planning, Resourcing, and Requirements) on malicious intrusions, attacks, or suspicious activities.
• Share emerging Cyber Threat Intelligence data to achieve threat-informed and prioritized vulnerability scoring and mitigation.
• Analyze and document malicious cyber actors' TTPs (Tactics, Techniques, and Procedures), providing recommendations aligned with vulnerabilities and enterprise operational environments.
• Assist in developing IOCs for active defensive countermeasures and passive detection signatures.
• Provide risk assessments and recommendations based on analysis of technologies, threats, intelligence, and vulnerabilities.
• Recommend adjustments to prioritized enterprise-focused analysis based on immediate threats identified through intelligence and other analysis.
• Collect analysis metrics and trending data, identify key trends, and provide situational awareness.
• Document and report the identification and sharing of newly identified IOCs with strong written communication skills.
• Work both independently and collaboratively with attention to detail.

Requirements

• Bachelor's Degree and 8+ years of relevant experience; equivalent combinations of education, certifications, and experience will be considered.
• DoD Approved Baseline 8570/8140 IAT Level II certification (e.g., Sec+, CySA+, CCNA-Security, CND) required prior to start date.
• DoD Approved Baseline 8570/8140 CSSP Analyst certification (e.g., CEH, CySA+, Certified First Responder-CFR) required prior to start date.
• GIAC Cyber Threat Intelligence (GCTI) or equivalent certification required within the first 120 days of employment.
• TS/SCI clearance and ability to obtain and maintain a Polygraph.

Skills

• Knowledge of standard network infrastructure.
• Understanding of masquerading, certificates, and file hashing.
• Familiarity with monitoring emerging threats through Tools, Techniques, and Procedures (TTPs) and their relation to the MITRE ATT&CK framework.
• Ability to pivot on indicators.
• Strong problem-solving and written communication skills.

Schedule

• Scheduled Weekly Hours: 40
• Travel Required: Less than 10%
• Telecommuting Options: Onsite

Pay

The likely salary range for this position is $144,500 - $195,500. Salary will be set based on experience, geographic location, and possibly contractual requirements.

Benefits

• Medical plan options, some with Health Savings Accounts.
• Dental and vision plan options.
• 401(k) plan with pre- and post-tax contribution options and company match.
• Paid time off, including vacation, sick, personal time, holidays, parental leave, military leave, bereavement, and jury duty leave.
• Short- and long-term disability benefits.
• Life, accidental death and dismemberment, personal accident, critical illness, and business travel and accident insurance.

Locations

• Reston, VA (On Customer Site)
• Bolling AFB, Washington, DC