CI Cyber Threat Technical Analysis (Level III) support - TS/SCI Clearance required

Job Description

Job Description

Overall Assignment Description: The CI Cyber Threat Technical Analyst will ensure all required reports are complete with minimal errors and that all processes, activities, and reports are conducted with in established time frames. He or she will also ensure analysts are trained in and follow the current standard operating procedures.

Duties:
• Support team members in completing forensics reports, CI Cyber Inquiries, and monthly, quarterly, and annual CI Cyber Threat reports. Support includes, but is not limited to, written and technical analysis that contributes to the understanding of a particular threat or situation.
• Identify, analyze, define, and coordinate user, customer and stakeholder needs and translate them into technical requirements.
• Detect anomalous activity through network data analysis.

• Record best practices, lessons-learned, processes and procedures, and other pertinent quality topics in appropriate formats.
• Evaluate Intrusion Detection, incident tickets, event and log analysis, security change tracking and other network security systems and devices.
• Provide written reports based on findings.
• Perform work without appreciable direction and exercising considerable latitude in the determination of technical objectives of assignments.
• Participate in special projects as required.
• Assist in the development and delivery of malware threat awareness products and briefings.
• Participate in technical meetings and working groups to address issues related to malware threats and vulnerabilities.
• Collaborate with customers and team members consisting of computer security and CI investigators and forensic analysts and other internal and external organizations to facilitate a premier malware program.
• Thoroughly investigate instances of malicious code to determine attack vector, payload, potential origin, and determine extent of damage and data exfiltration.
• Develop analysis and make recommendations for the purchase of software that will mitigate malware intrusions.
• Identify risks to computer systems and make recommendations for corrective actions.
• Coordinate CI Cyber activities originating from Enterprise Incident Response Events.
• Conduct liaison between CI Office, Insider Threat, Cyber Security Operations Center (CSOC), and other NGA Offices as applicable to conducting the CI Cyber Mission.
• Perform threat analysis, threat forecasts, threat alerts, and recommend countermeasures.

Skills and Experience:
Required:
• Shall possess at least 7 years of network analysis experience.
• Shall identify, decipher, and understand network artifacts.
• Possess or obtain certification to comply with DoD 8570.01-M Information Assurance (IA) requirements within one calendar year of assignment at the sole expense of the vendor. Shall possess or obtain and maintain IA III certification. See DoD 8570.01-M for acceptable certifications for each IA level.
Desired:
• Be a credentialed graduate of an accredited federal or DoD CI training academy.
• Possess a Bachelor's Degree in Science, Technology, Engineering or Mathematics disciplines.
• Possess a DoD Cyber Crimes Investigator certification.

• Possess post-graduate degree in Science, Technology, Engineering of Mathematics disciplines.
• Experience with malware analysis.
• Possess knowledge and understanding of foreign adversaries' security and intelligence services, terrorist organizations, and threats posed to US Gov.
• Experience translating Government vision into understandable and achievable measures.
• Possess ability to coach teammates to achieve objectives
• Possess ability to monitor and track progress towards achievable measures.