Cyber Threat Intelligence Analyst

Clearance Level: Top Secret, Must Have Clearance to Start

Job Description

Agile Defense is actively seeking a Cyber Threat Intelligence Analyst with background experience on People's Republic of China (PRC) to apply their technical and analytic expertise to evaluate advanced and emerging cyber threats targeting Federal Departments and Agencies (D/A) and National Critical Functions (NCF). The selected candidate will produce all-source, strategic cyber intelligence assessments using various industry and government tools and classified and unclassified data sets.

They will Identify, Investigate, and pursue cyber events of significance and communicate findings to key decision makers via a broad range of intelligence products while adhering to intelligence tradecraft and methods. Position is contingent on successfully completing a program-based background investigation.

Duties include

• Collect and analyze threat data from multiple sources (open-source intelligence, dark web, threat feeds, internal logs).
• Identify threat actors, tactics, techniques, and procedures (TTPs) used in cyberattacks.
• Assess vulnerabilities and risks to the organization based on current threat landscape.
• Produce intelligence reports for security teams and leadership to guide decision-making.

Education and Background

A minimum Bachelor’s with 5+ years of experience, MS 3+ years of experience or PHD 0+ years of experience.

Years of Experience

Years of experience depends on educational background.

Required Skills

• Active Top-Secret Clearance.
• Familiarity with dia writing standards, and applicable knowledge on icd203 & icd106 standards.
• Understanding of indicators of compromise and how they are utilized with CTI.
• Knowledge on how to use and implement the MITRE framework.
• Working knowledge of what an APT is.
• Know how to utilize TTP's from an APT to leverage against potential targets.

Preferred Skills

• ICS/SCADA/OT experience.
• Experience working with ICS/SCADA/OT equipment and/or have certifications/education relating to industrial control systems.
• Experienced with the People's Republic of China (PRC) threat in the context of the intelligence community world related to cybersecurity.

Working Conditions

Onsite in Arlington, VA 2 days a week.