Cyber Threat Analyst (TS/SCI with Polygraph)

A day in the life:

• Conduct advanced analysis of network traffic to identify, investigate, and assess potential cyber threats.
• Monitor and analyze security events using SIEM platforms and other network monitoring tools.
• Perform packet-level analysis using PCAP data and network forensic tools to identify suspicious or anomalous activity.
• Develop and refine detection methods, signatures, and monitoring strategies to improve threat visibility.
• Create queries, perform fingerprinting, and identify atypical events using specialized analytic platforms.
• Analyze and enrich data from multiple sources to generate actionable intelligence and security insights.
• Collaborate with development and engineering teams to define requirements and enhance cybersecurity capabilities.
• Evaluate common attack vectors and recommend defensive measures to strengthen network security.
• Document investigative findings, methodologies, and threat assessments in detailed reports.
• Present technical findings and recommendations to both technical and non-technical stakeholders.
• Support continuous improvement of cyber tradecraft, monitoring processes, and threat detection capabilities.

What you bring to the table:

• Bachelor's Degree in Computer Science or a related technical discipline from an accredited institution
• Atleast seven (7) years of relevant experience in the areas of intelligence, information security, network forensics, or security operations.
• Ability to analyze and enrich data from multiple sources to generate actionable intelligence.
• Experience with XKS for querying, fingerprinting, and identifying anomalous activity.
• Proficiency with SIEM tools such as Elastic, Splunk, or similar platforms.
• Strong understanding of TCP/IP networking, packet analysis, and Wireshark.
• Experience developing detection signatures using Zeek and/or Snort.
• Knowledge of common cyber threats, attack vectors, and network defense strategies.
• Experience designing and implementing network monitoring and threat detection solutions.
• Ability to collaborate with technical teams to enhance cybersecurity capabilities.
• Strong documentation, reporting, and communication skills for technical and non-technical audiences.

The total package: