Cyber Intel Analyst – Indications & Warnings

Job Title:  Cyber Intel Analyst – Indications & Warnings
Location:   Arlington, VA
Terms:  Full-time
Requirements:  Must be a U.S. Citizen with Active Security Clearance 

About the Role
Currently seeking to hire a Cyber Intel Analyst SME to become a part our Indications and Warnings (I&W) team with the Federal Strategic Cyber group. The I&W Program analyzes cyber threat attack vectors targeting DOS information, systems, and personnel. By using technical data for attribution, network defense, and reporting, I&W conducts trend analysis to create detailed threat models. 

Responsibilities 

• Leverage open-source, proprietary/vendor, and classified reporting to closely track advanced persistent threat actor activity. 

• Perform pattern, trend, and behavior analysis, as well as other specialized analysis techniques to identify malicious cyber threat activity targeting DOS information, systems and personnel. 

• Maintain records to catalog and track malicious cyber threat activity targeting DOS information, systems and personnel. 

• Identify Indicators of Compromise (IOCs) present on an Enterprise network through the use of a SIEM and other security tools and logs. 

• Liaise with members of the Intelligence Community (IC); and Acts as the fusion analysis cell within Cyber Threat Analysis Division (CTAD). 

• Provide presentations to a variety of technical and non-technical audiences pertaining to cyber threats. 

 

Qualifications: Basic Requirements 

• Bachelor’s degree and 14 years of experience is required. An additional 4 years of experience may be considered in lieu of degree. 

• Possess ONE of the following certifications: 

• CASP+ CE, CCISO, CCNA Cyber Ops, CCNA-Security, CCNP Security, CEH, CFR, CISA, CISM, CISSP (or Associate), CISSP-ISSAP, CISSP-ISSEP, Cloud+, CySA+, GCED, GCIA, GCIH, GICSP, GSLC, SCYBER 

• Experience with Splunk SIEM. 

• Experience leveraging the MITRE ATT&CK matrix or other threat models (e.g. Lockheed Martin Kill Chain, Diamond Model). 

• Knowledge or experience tracking advanced persistent threats (APTs). 

• Knowledge or experience pivoting from IOCs to identify related infrastructure. 

• Demonstrated written communication skills, communicating technical topics in an analytic fashion. 

• Experience briefing individuals and large groups, ranging from the working to executive level. 

• Demonstrated ability to work independently as well as with a team of other analysts. 

• Active U.S. Passport and the ability to travel up to two weeks at a time, both foreign and domestically (up to10%). 

• U.S. citizenship required. 

• Active Top Secret security clearance. 

 

About us 

Cyber Management International Corporation is actively recruiting highly IT Security professionals looking for challenging, exciting work in support of the U.S. Department of State (DOS). Specifically, our customer is the Bureau of Diplomatic Security (DS), Directorate of Cyber and Technology Security (CTS). DS/CTS is a center of excellence that brings together cybersecurity, technology security, and investigative expertise as a unified security capability focused on solving critical and emerging issues enabling the State Department to fulfill its vital global mission.   

For more information about our company, please visit www.cybermgt.com or email us at recruiting@cybermgt.com