Cyber Analyst

Shift5 is the observability platform for onboard operational technology (OT). We’re a rapidly growing scale-up that specializes in cybersecurity, predictive maintenance, and compliance for operational technology (OT) systems across defense, aerospace, and rail. We are a collaborative, passionate, and driven cadre of dynamic, multidisciplinary experts and we’re focused on helping our customer’s fleets run smarter and safer by accessing and democratizing the volumes of onboard OT data generated by transportation and freight fleets, and defense fleets and weapon systems. Come join us. 

Our Values :

• Embrace Truth and Integrity: Base decisions on data, foster open dialogue, and uphold unwavering integrity.
• User-Centric Focus: Prioritize user needs to guide our actions and resource allocation.
• Collaborative & Adaptable: Collaborate for excellence, learning from failures and driving iterative improvements, recognizing every decision's significance.

Shift5 is seeking a seeking a full-time Cyber Analyst to join our growing team. The Cyber Analyst will leverage their expertise in data analysis techniques, cyber threats, and OT network traffic to enhance the security posture of military aircraft. This role demands a proactive approach to threat detection, in-depth analysis of complex data sets, and the ability to translate technical findings into actionable insights for both technical and non-technical audiences. This role will embed in a military customer’s security operations center and will serve as a focal point to integrate weapons systems data into cyber threat detection and response. This role will operate in a team-based environment with Field Engineers, Data Engineers, Cyber Threat Engineers, Product Managers, Program Managers, Mission Success, and military cyber operators. 

Responsibilities: 

• Dive deep into the inner workings of weapon systems, mastering their architecture and communication pathways.
• Become fluent in the language of cyber threats, using frameworks like MITRE ATT&CK to identify and analyze vulnerabilities.
• Decipher complex technical documentation, extracting critical insights to fuel your data analysis.
• Leverage your expertise in real-time embedded systems to understand system behavior and predict potential attack vectors.
• Unlock the secrets of wireless communication protocols, including GPS, Link16, and SATCOM, to safeguard critical systems.
• Experience wrangling and interpreting RF and OT protocol datasets.
• Analyze aircraft data to identify patterns indicative of cyber threats. 
• Develop and implement anomaly detection rules and signatures.
• Conduct root cause analysis of anomalous behavior, faults, and maintenance defects.
• Prepare comprehensive reports summarizing findings, methodologies, and recommendations.
• Share knowledge / document formal and informal training around expertise in cyberdata analysis and interpretation with military and civilian customer personnel.

Qualifications: 

• Analytics: Demonstrated expertise in data analytics using tools similar to Databricks.
• Vulnerability Research: Familiarity with vulnerability research or reverse engineering of embedded systems, RF protocols, Operational Technology (OT) systems or weapons systems..
• Data Handling: Proficiency in working with and analyzing large data sets.
• Technical Acumen: Ability to develop technical processes and experience integrating API-based commercial software products
• Customer Engagement: Ability to engage with customers, understand their requirements, and tailor solutions (including building and offering formal and informal training) accordingly
• Communication: Astute written and verbal communication skills, with the ability to consistently and cogently address our customers' needs.
• Cyber Frameworks: Familiarity with common cyber, IT, and OT frameworks (e.g., MITRE ATTACK, Perdue Model, OSI Model) and adaptability to new use cases.
• Pattern Recognition: Capability to capture and translate patterns into alerts and detection methodologies.
• Executive Briefings: Experience in creating and delivering executive briefings and updates.
• Shift5 Culture: Ability to thrive in a team-oriented culture, delivering a significant individual contribution while collaborating with and strengthening teammates
• Travel: Must be able to work with remotely distributed teams and sho