Senior Threat Intelligence Analyst

Trellix · Reston, VA · Yesterday

Information TechnologyFull-time

About Trellix

Trellix is a global company redefining the future of cybersecurity. The company’s comprehensive, open, and native cybersecurity platform helps organizations confronted by today’s most advanced threats gain confidence in the protection and resilience of their operations. Trellix, along with an extensive partner ecosystem, accelerates technology innovation through artificial intelligence, automation, and analytics to empower over 50,000 business and government customers with responsibly architected security.

About the Role

Trellix Threat Intelligence is a portfolio of solutions and services from our team of experts including our cybersecurity product team, Trellix Guardians Group, and our Advanced Research Centre (ARC). We help defend our customers against everyday threats with tight collaboration between both our product team and our threat researchers working together in real time.

The Trellix Guardians deliver cyber threat intelligence, assessment, education, and incident response services to global customers to enable them to prepare, detect, and respond to the wide array of malicious cyber activity that persistently threatens organizations across all industry sectors.

The Threat Intelligence Analyst will collaborate with customers to enhance their cyber threat intelligence capabilities by leveraging the experience, knowledge, tools, and data of the Trellix cyber defense enterprise. The role is responsible for delivering cyber threat intelligence services, including knowledge of sophisticated threat actors and associated tactics, techniques, and procedures, along with research, collection, analysis, and reporting of finished intelligence. The role will support customer security operations including planning and risk assessment, vulnerability assessment, 24x7x365 monitoring, and incident response.

This is an on-site role at a customer facility at Fort Belvoir in Virginia. The Threat Intelligence Analyst will report to the Senior Manager of the threat intelligence branch of Trellix Guardians. As a member of the Guardians, the Analyst will collaborate with Guardian teammates, members of the ARC, Trellix Professional Services Consultants, and third-party partners. The analyst will serve as a primary customer interface and will become immersed in customer operations through rapid learning and establishing relationships.

Responsibilities

Serve as a cyber threat intelligence subject matter expert and trusted advisor.
Integrate with customers’ operations-intelligence cycles to effectively inject cyber threat intelligence.
Collaborate with Trellix employees, customers, and third parties to collectively support the defense of the customer’s network and mission elements.
Develop information/intelligence requirements and establish associated priorities.
Identify intelligence gaps and uncover opportunities to improve intelligence sharing and utility.
Create tailored strategies for research, data collection, analysis, and reporting focused on customers’ areas of interest.
Draft comprehensive responses to customer requests for information/intelligence (RFIs).
Perform all-source research and analysis using Trellix tools, data sets, third-party tools, and open sources.
Produce high-quality written and oral reporting, including active participation in peer review and quality assurance.
Map relationships between malicious cyber activity and global events, such as geopolitical shifts, natural disasters, or crises.
Deliver expert threat intelligence presentations to diverse customer teams, ranging from technical staff to senior executives (General/Flag Officers, SES/SIS, and C-Suite).
Maintain an up-to-the-minute understanding of the cyber threat landscape, including APTs, motivations, attack vectors, and TTPs.

Requirements

Self-motivation and a genuine passion for cybersecurity are essential.
Strong proficiency in structured analytical techniques, including Quality of Information Checks, ACH, Key Assumptions Checks, and Gap Analysis.
Critical thinking skills to remain objective and avoid analytical biases.
Ability to produce clear, complete, and concise reporting under tight deadlines with extreme attention to detail.
Deep understanding of cyber threats, attack vectors, detection capabilities, and countermeasures.
Experience with open-source intelligence (OSINT) collection methods and tools.
Background working within a Security Operations Center (SOC) to monitor, respond to, and remediate detected issues.
Clear grasp of organizational Incident Management processes as they relate to threats and vulnerabilities.
Technical knowledge of XDR/EDR, Endpoint Security tools (AV, whitelisting, etc.), and Threat Hunting.
High-level comprehension of malware types, detection methods, and analysis techniques.
Familiarity with industry frameworks such as MITRE ATT&CK and D3FEND, the Cyber Kill Chain, and the Diamond Model.
Proven track record of identifying and mitigating cyber threats using various detection strategies.
Solid understanding of technical vulnerabilities and their associated risks.
Hands-on experience with SIEM tools and collaborating closely with SIEM Analysts on event correlation and analysis.
5+ years of intelligence gathering, analysis, and reporting experience.
Active Top Secret SCI clearance.
Candidate must have, or be willing to obtain, the 8140 IAT III and 8140 IASAE II certificates.

A Bachelor's degree in information security, cyber discipline, political science, or a related analytical field is not required but considered an asset.

Benefits

Retirement Plans
Medical, Dental, and Vision Coverage
Paid Time Off
Paid Parental Leave
Support for Community Involvement
Flexible work hours and family-friendly benefits