Cybersecurity Threat Analyst I

• Support proactive threat analysis and hunt activities using established hypotheses, queries, procedures, and data sources
• Proactively analyze security telemetry to identify indicators of compromise, anomalous behavior, and adversary activity that has not met an incident threshold or has evaded automated security controls
• Assess and correlate data from multiple sources, including network, endpoint, identity, SIEM, threat intelligence, vulnerability, and other available security data
• Document hunt activity, findings, evidence, and recommended follow-on actions in authorized systems and initiate or support incident-response processes when malicious activity is identified
• Provide relevant findings and trends for SOC operational reporting, significant-activity reporting, and defensive awareness
• Research indicators, adversary behaviors, and suspicious activity under guidance from senior threat personnel.
• Maintain clear hunt notes and document negative as well as positive findings to support repeatability and knowledge development
• Escalate suspicious activity and potential detection gaps to senior threat analysts and watch operations

Clearance: TS/SCI with the ability to obtain and maintain a CI polygraph, * Bachelor’s degree from an accredited institute in a technical discipline applicable to the position; an additional 4 years of may be substituted in lieu of a degree

• Minimum two (2) years of relevant experience in addition to education level
• Foundational knowledge of common cyber threats, indicators of compromise, network/host artifacts, and security monitoring concepts
• Familiarity with SIEM/search technologies, threat intelligence, MITRE ATT&CK, or security data analysis is desired
• Ability to document analytical reasoning and communicate findings clearly
• Must possess current DoD 8570 IAT II or IAM II certification
• Experience working in a DoD or IC environment desired
• Current active TS/SCI clearance, with the ability to obtain and maintain a CI polygraph