Cyber Intel Analyst - I&W

Basic Requirements:

• Bachelor's degree and 5 years of experience; 9 years of experience with HS Diploma.
• Must possess or be able to obtain at least one of the following certifications before start date. Continued certification required as a condition of employment:
  • CAP, CASP+ CE, CCISO, CCNA-Security, CISM, CISSP (or Associate), CISSP (or Associate), CND, CSSLP, CySA+, GICSP, GSEC, GSLC, Security+ CE, SSCP, PPDA, Agile IC, SNOW App Dev.
• Experience with Splunk SIEM.
• Experience leveraging the MITRE ATT&CK matrix or other threat models (e.g. Lockheed Martin Kill Chain, Diamond Model).
• Knowledge or experience tracking advanced persistent threats (APTs).
• Knowledge or experience pivoting from IOCs to identify related infrastructure.
• Demonstrated written communication skills, communicating technical topics in an analytic fashion.
• Experience briefing individuals and large groups, ranging from the working to executive level.
• Demonstrated ability to work independently as well as with a team of other analysts.
• Active U.S. Passport and the ability to travel up to two weeks at a time, both foreign and domestically (up to 10%).
• U.S. citizenship required.
• Active Top Secret security clearance with SCI eligibility.

Peraton is seeking to hire a Sr Cyber Intel Analyst to become a part our Indications and Warnings team with the Federal Strategic Cyber group.

Location:

Arlington, VA.

• Leverage open-source, proprietary/vendor, and classified reporting to closely track advanced persistent threat actor activity.
• Perform pattern, trend, and behavior analysis, as well as other specialized analysis techniques to identify malicious cyber threat activity targeting DOS information, systems and personnel.
• Maintain records to catalog and track malicious cyber threat activity targeting DOS information, systems and personnel.
• Identify Indicators of Compromise (IOCs) present on an Enterprise network through the use of a SIEM and other security tools and logs.
li>Liaise with members of the Intelligence Community (IC); and Acts as the fusion analysis cell within Cyber Threat Analysis Division (CTAD).
• Provide presentations to a variety of technical and non-technical audiences pertaining to cyber threats.
• For up to 10% travel to foreign and domestic locations.