This Analyst position supports the Department of Defense and participates as a team member serving as a Financial/Cyber Threat Intelligence Analyst who applies intelligence analysis skills to monitor, assess, and report on cyberspace operations, capabilities, vulnerabilities, and personalities that could pose a threat to Department of Defense (DoD) critical assets, the DoD Information Network (DoDIN), Defense Industrial Base (DIB) networks and supports US Intelligence Community and Interagency grid network sensor portfolios. Conducts reviews, identifies gaps, recommends solutions, and evaluates large datasets from a myriad of sources. Develops reports and briefing artifacts; may serve as a mentor to other mid-level analysts and junior staff.

Works as an expert in the field, researches and evaluates technical and all-source intelligence with specific emphasis on cryptocurrency transactions and counter-threat finance, network operations and cyber warfare tactics, blockchain analysis, techniques, and procedures focused on the threat to networked weapons platforms, and US and DoD information networks. Analyzes threat data from various sources and network events to determine the impact on current operations and conducts all-source research to determine advisory capability and intent. Prepares assessments and cyber threat profiles of current events based on the sophisticated collection, research, and analysis of classified and Open-Source information. Develops and maintains analytical procedures to meet changing requirements and ensure maximum operations. Collects data using a combination of standard intelligence methods and business processes. Produces high-quality papers, presentations, recommendations, and findings for senior US government intelligence and network operations officials.

Requires experience providing integrated cyber, financial, virtual asset/virtual currency, and business analysis with advanced analytics and data science to support national security, criminal, cyber and counterintelligence investigations, and operations.

Must have experience with virtual currency transaction tracing utilizing blockchain analytical tools/explorers, to include Chainalysis.

Possess expertise in using Intelligence Community databases, analytical tool suites, and commercial tool suite applications to analyze illicit financial flows and cryptocurrency exchanges.

Possess knowledge of network and application protocols, cyber vulnerabilities and exploitation techniques, and cyber threat/adversary methodologies (TTPs).
Possess familiarity with all-source analytical tool suites common to the Intelligence Community.

Possess an understanding of Cloud Security Architecture and related aspects of cybersecurity operations/analysis (e.g., incident response & management, forensic media analysis, malware analysis/reverse-engineering, cyber threat intelligence analysis, etc.) and security architecture.

Possess working knowledge of blockchain analytical techniques.

Preferred Qualifications:

Fluency in Chinese Mandarin.

Experience in gathering, analyzing, correlating, or evaluating information from a variety of resources, such as law enforcement databases.

Possess current IAM Level II & III, CSSP Analyst (Security , CySA , GICSP, GSEC, CND, CISSP, CASP , GCIA, GCIH, GCFA, CEH), GIAC Open Source Intelligence (GOSI) Certification, or SANS SEC487 Open-Source Intelligence (OSINT) Gathering and Analysis course.

Experience with Law Enforcement/Counterintelligence (LE/CI) Operations and/or Cyberspace Operations.

Skilled in building extended cyber security analytics.

Demonstrated experience briefing Senior Executive Service (SES) and General Officer/Flag Officer (GO/FO) leadership.

Experience in intelligence-driven defense and/or cyber–Kill Chain methodologies.Qualifications

• Experience conducting in-depth research in classified and commercial databases and producing written products showing Advanced Persistent Threat (APT) pattern analysis
• Experience with SIEM technologies
• Knowledge of current and emerging cyber adversaries and their techniques, tactics, and procedures (TTPs)
• Knowledge of threat modeling and adversary tactics and techniques frameworks, including MITRE ATT&CK matrices, Cyber Kill Chain, STRIDE, or PASTA
• Experience with Department of Defense Cyber Operations

Preferred Additional Skills

• Sec , CISSP, GCTI or other relevant certification
• Cybersecurity consulting experience a plus

Job Type: Full-time

Pay: $107,200.00 - $149,800.00 per year

Benefits:

• 401(k)
• Dental insurance
• Health insurance
• Life insurance
• Paid time off
• Parental leave
• Professional development assistance
• Relocation assistance
• Tuition reimbursement
• Vision insurance

Schedule:

• 8 hour shift

Experience:

• Intelligence analysis: 1 year (Required)
• Cryptocurrency: 1 year (Required)
• Blockchain: 1 year (Required)

Security clearance:

• Top Secret (Required)

Work Location: Hybrid remote in Linthicum Heights, MD 21090