Cyber Threat Analyst

Position Description

Valiant Solutions is seeking a Cyber Threat Analyst to join our rapidly growing and innovative cybersecurity team!

This position serves as a Cyber Threat Analyst in support of a major federal client. This organization provides services that analyze and produce enhanced cyber security and threat intelligence information to include threats and potential threats to the customer’s personnel, information, and information systems; provides timely and relevant intelligence to assist with mitigating cyber threats confronting the Department; supports evaluation, implementation, and operations of tools/technologies used in advanced analysis; support and develop the Cyber Insider Threat Program. Responsible for the delivery of written and oral briefings to stakeholders and community partners across the Foreign Affairs community  

Named one of the Best Places to Work in the Washington DC area for 11 consecutive years, Valiant is proud of our employee-centric culture and commitment to excellence. If you are interested in learning more about Valiant and this opportunity, we invite you to apply now!

This position allows for 100% remote work. Remote work necessitates a high level of trust in our employees, and we strictly adhere to the details found below in our Remote Work Policy. 

Required Skills

• One of the following certifications is required: CISSP, GIAC Certified Incident Handler (GCIH) ,or  GIAC Cyber Threat Intelligence Certification (GCTI) certification 

• 3+ years of experience in cyber threat intelligence, cyber technical analysis, threat hunting, and threat attribution assessment with increasing responsibilities.

• 2-4+ years of experience in a technical capacity; preferably in a role related to any of the following disciplines: security operations, network monitoring or analysis, intrusion or anomaly detection

• Bachelor’s Degree or a minimum of 4 years of relevant experience

• Strong understanding of malware analysis, advanced persistent threats, infection vectors, and defense strategies.

• Experience with and knowledge of cyber threats and/or intelligence analysis.

• Expert written and oral communication skills, including experience with executive-level presentations. 

• Knowledge of and experience with standard network logging formats, network management systems, and network security monitoring systems, security information, event management, network packet analysis tools, and forensic analysis tools.

• Knowledge of and experience with web proxy, firewalls, IPS, IDS, mail content scanning appliances, enterprise AntiVirus solutions, Network Analyzers, and domain name servers desired

• Demonstrated knowledge in one or more of the following areas: network security principles, host-based security principles, network and system administration, and forensic analysis principles

• Advanced user of Splunk, Varonis, SECOPS RSA Archer, Microsoft Advanced Threat Protection (ATP), Microsoft Exchange Online Protection, Netwitness, PaloAlto, Redseal, Trend Micro anti-virus solutions, Webinspect, Wireshark, Tenable and ForeScout (MSS) tools (e.g. LookingGlass, FireEye, and InfoBlox)

• Knowledge related to the current state of cyber international relations, adversary tactics, and trends. 

• Ability to work quickly and a willingness to complete ad hoc, time-sensitive assignments.

• Demonstrated oral and written communication skills, ability to document technical analysis, and articulate outcomes to non-technical audiences

• Good working knowledge of cyber threat intelligence analysis

• Strong analytical skills and the ability to effectively research, write, communicat,e and brief to varying levels of audiences, including at the executive level

• Previous experience managing cross-functional and interdisciplinary project teams to achieve tactical and strategic objectives.

Responsibilities

• The Cyber Threat and Intelligence Analyst will support the customer’s overall cyber threat analysis efforts. 
• Researches, analyzes, and writes documents such as cybersecurity intelligence bulletins, alerts, and briefings for all levels of stakeholders from Tier 1-3 SOC, security engineering, and executives.
• Ensures documentation is accurate, complete, meets editorial and government specifications, and adheres to standards for quality, graphics, coverage, format, and style. 
• Ensures content is developed in an appropriate style for the intended audience, includin