Cyber Threat Intelligence Engineer III

Description

The agency relies on this role to spot and reduce cyber threats, strengthen its security posture, and protect critical assets.

The team collects, combines, analyzes, produces, and shares threat intelligence from the intelligence community, other government bodies, commercial feeds, open sources, and partners. The goal is to give the agency a clear view of the threat environment.

Reports go to internal and external stakeholders and are based on events, alerts, and incidents on the agency's systems and networks.

The company's work centers on national security missions and the safety of the nation.

Responsibilities

• Research emerging threats by analyzing commercial and government cyber intelligence reports, and turn the findings into actionable intelligence for incident response, vulnerability management, and other cybersecurity work.
• Monitor and assess the global threat landscape, including threat actors, malware, and hacking techniques that could affect the agency's systems and networks.
• Build and maintain threat profiles and reports that improve detection and response.
• Assess the relevance and effectiveness of signatures and indicators of compromise based on intelligence.
• Coordinate with Cyber Counterintelligence, Insider Threat, and Red/Blue Team to carry out adversary profiling and threat modeling.
• Analyze behavior patterns to work out adversary intent, and present the analysis to the Government in documents, briefings, or other products as needed.
• Develop detailed threat models of adversary activity and present them in formal reports, briefings, or other products as needed.
• Prepare regular and ad hoc reports, briefings, documents, and diagrams for the Government and other contractors so stakeholders understand cyber threats and the risk they pose to the agency.
• Once the Government authorizes it, share CSOC cyber intelligence products with internal teams and DoD and IC partners. These include threat intelligence reports, significant cyber activity reports, incident investigation reports, and other products the Government directs.
• Collaborate with internal and external stakeholders to gather and share relevant threat intelligence.
• Keep threat intelligence processes and methods current so the team stays ahead in cyber defense.
• Document all work in the authorized ticketing system in enough detail for the Government and other services to retrace your analysis.
• Contribute input to the daily CSOC Significant Activity Report, the daily CSOC Operations Update, and the weekly CSOC Status Report.

Requirements

• Required: Experience with cyber threat intelligence.
• Required: Ability to work independently with minimal supervision.
• Required: Proactive approach to assigned duties.
• Required: Strong communication skills.
• Required: A team player who helps build a collaborative environment.
• Required: DoD 8570.01 IAT II certification, and willingness to earn a CSSP Analyst certification within 120 days of joining.
• Desired: Master's degree.
• Desired: Security Operations Center (SOC) experience.

Conditions

Full-time, regular position.

You need a TS/SCI clearance to start.

Travel is up to 10%, local only.

The proposed salary range is $75,200-$158,100.

Final pay depends on location, federal contract labor categories and wage rates, relevant experience, specific skills, education, and certifications.

Benefits

• Flexible time off that lets you take the time you need.
• Access to robust learning resources.
• Healthcare, wellness, financial, and retirement benefits.
• Family support, continuing education, and time off benefits.
• Competitive compensation and learning and development opportunities.