Cyber Threat Analyst - Entry Level

Receive and take initial action on warning intelligence information received from intelligence organizations

• Perform preliminary analysis on warning intelligence information
• Share warning intelligence notifications, notes, reports, and information with end customers.
• Identify potential impact to end customer operations through analysis of warning intelligence information
• Analyze intelligence reports, forensic reports, and reverse engineering of malware reports to determine associated indicators of compromise (IOCs) and utilize the IOCs to develop and distributes countermeasures to detect and prevent identified threats.
• Evaluate IOCs derived from incidents to determine association with known computer network exploitation (CNE) groups and thoroughly investigate the IOCs for other infrastructure possibly related to the CNE teams (domain registrations, IP ownership, VPN infrastructure, strains of malware, etc.) for consideration of additional proactive defensive measures.
• Share cyber intelligence with peer DCO organizations and end customers.
• Develop and distribute countermeasure to prevent/mitigate potential cyber event impacts to networks and information systems
• Share countermeasures or interim guidance to prevent/mitigate cyber event impacting networks and information systems with peer DCO organizations and end customers.

Familiarity with networking concepts

• Familiarity with DoD and Army policies and procedures
• Python, bash, GIT

Required Certifications: Security+ Continuing Education (CE) [CompTIA]

Required Security Clearance: DoW Secret Clearance, but have the capability to be clearable up to the Top Secret level

Required Education Level: Bachelor’s Degree in the Area(s) of Study - Cybersecurity