Cyber Threat Analyst

Description

Job Description:

Job Description Leidos has a current job opportunity for a Cyber Threat Analyst on Peterson AFB, Colorado Springs, CO.

POSITION SUMMARY:
This position will support the USNORTHCOM and NORAD customer with Cyber Threat Intelligence products and network security monitoring and will perform as the analyst in area of cyber threat intelligence.

PRIMARY RESPONSIBILITIES:

• Interact with the DISA SOC personnel to maximize cyber threat prevention measures, enhance audit and logging standards,

• and enforce and monitor effective cyber security policies and configurations and security event management within the logging

• and SIEM infrastructure.

• Implement the core Threat Intelligence concepts (Cyber Kill Chain, APT, MITRE ATT&CK).

• Utilize SIEM technologies to correlate security events and logs and identify threats.

• Incorporate threat intelligence into countermeasures to detect and prevent intrusions and malware infestation.

• Identify threat actor tactics, techniques and procedures and based on indicators develops custom signatures and blocks.

• Understand and employ the MITRE ATT&CK Matrix.

• Know the importance how to be in control of the adversary’s intrusion steps

• Recognize what you’ll need to know to prevent or identify APT intrusions

• Identify network architectures and select network components

• Maintain network devices, design, and infrastructure

• Understand concepts of packet analysis

• Navigate the command line using specific expressions to manipulate data

• Handle and organize disparate data about detections, attacks, and attackers

• Discovery techniques and vetting of new intelligence

• Create of Situational Awareness Reports and Threat Briefs.

BASIC QUALIFICATIONS:

• Bachelors Degree in related field and 4+ years of relevant experience; additional years of experience may be substituted in lieu of a degree.

• Must possess an active DoD 8570, IAT Level II Certification at your start date.

• Must possess a CSSP-Analyst certification within 180 days of your start date.

• Computer network defense technologies and Cyber Kill Chain experience.

• Threat actor TTP and indicator identification using large data sources.

• Custom signature development experience.

• Packet analysis experience.

• Have a strong understanding of the enterprise network and how each component contributes to Threat Intelligence.

• Must possess an active DoD Secret security clearance, prefer TS/SCI.

GSMO

Pay Range:

The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.