Cyber Threat Intelligence Analyst

Cyber Threat Intelligence Analyst
Location: Huntsville, AL
Work Type: Onsite
Remote Work: No
Job Description

Work as a member of a threat intelligence team responsible for understanding how emerging cyber threats impact the client organization while conducting highly detail-oriented security threat analysis and working with clients to validate and characterize threats. Support incident detection, response operations, and signature development and provide input on new detection strategies and remediation guidance. Form accurate and precise analysis and escalate it to appropriate teammates or internal teams for additional assistance or review. Provide intelligence context to support the fine-tuning of signatures.

Qualifications

8 years of experience with cybersecurity

4 years of experience with conducting threat research focused on nation-state, criminal, or malicious Cyber activities

Experience with translating complex technical cyber events into a narrative format for technical and executive audiences

Experience with the technical capabilities and limitations of the internet and online technologies, including collaborative internet tools, such as social networking sites, blogs and microblogs, and internet mapping tools

Experience with computer network protocols and operations

Knowledge of Cyber intrusion vectors, malware, networking, and monitoring

Knowledge of threat intelligence tradecraft, including structured analytic, contrarian, and imaginative analytic techniques

Ability to write concise analytical products and assessments

Top Secret clearance

Bachelor's degree

Additional Qualifications

Experience with Splunk

Experience with Sentinel

Experience with the intelligence community (IC) or national security-related areas

Experience with open source and threat intelligence platforms, including Mandiant, CrowdStrike, VirusTotal, Shodan, and Domain tools

Experience with using industry-standard digital forensics tools and procedures

Experience with computer programming languages, including PhP, Python, SQL, C , Perl, or Java

Experience with SIEM and Endpoint tools, including Splunk, Defender, QRadar, and ArcSight

Experience with penetration testing

CEH and Security or CSA Certification

GIAC Cyber Threat Intelligence (GCTI) Certification

Clearance:

Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; Top Secret clearance is required.

Compensation and Benefits
Salary Range: $100,000 - $140,000 (Compensation is determined by various factors, including but not limited to location, work experience, skills, education, certifications, seniority, and business needs. This range may be modified in the future.)

Benefits: Gridiron offers a comprehensive benefits package including medical, dental, vision insurance, HSA, FSA, 401(k), disability & ADD insurance, life and pet insurance to eligible employees. Full-time and part-time employees working at least 30 hours per week on a regular basis are eligible to participate in Gridiron s benefits programs.

Gridiron IT Solutions is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status or disability status.

Gridiron IT is a Women Owned Small Business (WOSB) headquartered in the Washington, D.C. area that supports our clients' missions throughout the United States. Gridiron IT specializes in providing comprehensive IT services tailored to meet the needs of federal agencies. Our capabilities include IT Infrastructure & Cloud Services, Cyber Security, Software Integration & Development, Data Solution & AI, and Enterprise Applications. These capabilities are backed by Gridiron IT's experienced workforce and our commitment to ensuring we meet and exceed our clients' expectations.