Cyber Threat Operations & Intelligence Analyst
Job Description
Parsons is looking for a Threat Operations and Intelligence Cyber Analyst to join their team. This role involves serving as a subject matter expert with deep domain knowledge in specific threat areas of interest across the globe. Key responsibilities include analyzing, correlating, and operationalizing threat intelligence to support proactive defensive cyber activities.
- Work in close collaboration with a team of cyber analysts to pinpoint the highest levels of persistent cyber threats.
- Communicate complex findings to diverse audiences.
- Work with development teams and articulate requirements/enhancements to capabilities and tools.
- Analyze, correlate, and synthesize threat data from diverse sources.
- Create threat intelligence reports indicating findings, mitigations, and confidence.
- Analyze log files and create threat intelligence reports.
- Create visualizations and dashboards using tools like Elastic/Splunk or other SIEM.
- Analyze TCP/IP communication protocols and packet flows based on IP traffic using Wireshark.
- Create signatures in Zeek and/or Snort.
- Analyze Packet Capture (PCAP) traffic in Wireshark.
- Understand and apply knowledge of Advanced Persistent Threats (APTs).
- Develop mission-specific tactics, techniques, and procedures (TTPs) with IC mission cybersecurity analysts.
- Write signatures in Zeek and/or Snort.
- Identify atypical events and fan advanced analytics, network diagrams, and other forms of associated knowledge to understand systems, networks, environments, and adversaries.
Required Skills
- Active TS/SCI security clearance with polygraph.
- Bachelor’s Degree in computer science, information systems, network forensics, or other data analysis roles.
- 10+ years of experience working in intelligence, information security, network forensics, insider threat, or security operations.
- Specific understanding of key global areas of interest that pose threats to U.S. critical systems and Advanced Persistent Threats (APTs).
- Experience with reporting and IC analyst knowledge resources.
- Experience with Elastic/Splunk or other Security Information and Event Management (SIEM) as well as experience creating visualizations and dashboards.
- Exceptional ability to analyze, correlate, and synthesize threat data from diverse sources.
- Ability to work with development teams and articulate requirements/enhancements to capabilities and tools.
- Ability to perform log file analysis including creating threat intelligence reports that indicate findings, mitigations, and confidence.
- Vast experience with advanced analytics, network diagrams, and other forms of associated knowledge to further understand systems, networks, environments, and adversaries.
- Experience working with IC mission cybersecurity analysts on understanding the adversary and developing mission specific TTPs.
- Experience with XKS creating general queries, fingerprinting, and identifying atypical events.
- Understanding of TCP/IP communication protocols and packet flows based on IP traffic; analysis of Packet Capture (PCAP) traffic in Wireshark.
- Familiarity writing signatures in Zeek and/or Snort Security Clearance Requirement An active Top Secret SCI w/Polygraph security clearance is required for this position.
Pay
The salary range for this position is $157,500.00 - $283,500.00.
Benefits
- Medical
- Dental
- Vision
- Paid Time Off
- 401(k)
- Life Insurance
- Flexible Work Schedules
- Holidays
About the Role
Guided by our leadership vision of valuing people, embracing agility, and fostering growth, we cultivate an innovative culture that empowers you to achieve your full potential. Unleash your talent and redefine what’s possible.
Qualifications
Parsons is an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, veteran status or any other protected status.
Skills
- Threat Analysis
- Intelligence Gathering
- Network Forensics
- Security Operations
- Advanced Persistent Threats (APTs)
- IC Mission Cybersecurity
- SIEM Tools
- Log File Analysis
- Threat Intelligence Reporting
- Visualizations and Dashboards
- Advanced Analytics
- TCP/IP Communication Protocols
- Packet Capture (PCAP) Traffic Analysis
- Zeek and Snort Signatures
- Wireshark Usage
- Mission-Specific Tactics, Techniques, and Procedures (TTPs)
Benefits
- Medical
- Dental
- Vision
- Paid Time Off
- 401(k)
- Life Insurance
- Flexible Work Schedules
- Holidays
Pay & Schedule
The salary range for this position is $157,500.00 - $283,500.00.
Benefits
- Medical
- Dental
- Vision
- Paid Time Off
- 401(k)
- Life Insurance
- Flexible Work Schedules
- Holidays
Company Culture
We promote a culture of excellence and close-knit teams that take pride in delivering, protecting, and sustaining our nation's most critical assets, from Earth to cyberspace. We truly invest and care about our employee's wellbeing and provide endless growth opportunities as the sky is the limit, so aim for the stars!
Equal Opportunity Employer
We are committed to providing equal employment opportunities for all individuals without regard to race, color, religion, sex, national origin, disability, veteran status, or any other legally protected status.
Recruitment Fraud Awareness
Parsons is aware of fraudulent recruitment practices and encourages anyone with concerns to review our information at https://www.parsons.com/fraudulent-recruitment/.