Manager, Cyber Intelligence

This Senior Cyber Intelligence Analyst position offers a unique opportunity for growth and mentorship. As a Senior Cyber Intelligence Analyst you will apply your intelligence analysis skills to monitor assess and report on cyberspace operations capabilities vulnerabilities and personalities that could pose a threat to critical assets the DoD Information Network (DoDIN) Defense Industrial Base (DIB) networks and the US Intelligence Community and Interagency grid network sensor this role you will also serve as a manager performing supervisory duties for a staff of five direct report analysts. This includes conducting a full range of personnel management activities such as performance evaluations mentoring and professional development while fostering a culture of learning and collaboration within the team. Additionally you will have the chance to conduct reviews identify gaps recommend solutions and evaluate large datasets from diverse sources. You will develop reports and briefing artifacts for key stakeholders enhancing the teams contributions to overall mission success.

As a Senior Cyber Intelligence Analyst you will be recognized as an expert in the field researching and evaluating technical and all-source intelligence with specific emphasis on cryptocurrency transactions and counter-threat finance network operations and cyber warfare tactics techniques and procedures focused on threats to networked weapons platforms and US information networks. Your analyses of threat data from various sources and network events will directly impact current operations and your all-source research will inform advisory capability and intent. You will prepare assessments and cyber threat profiles of current events based on sophisticated collection research and analysis of classified and open-source information. Your role will also involve developing and maintaining analytical procedures to meet changing requirements and ensure maximum operational effectiveness underlining the urgency and significance of your work.

Mandatory Qualifications:

• Possess aligned DOD and Military training focused on Cyber Threat Intelligence Analysis / Intelligence Analysis.
• Familiarity with Cloud Security Architecture and all related aspects of cybersecurity operations and analysis (e.g. incident response & management forensic media analysis malware analysis/reverse-engineering and threat intelligence analysis).
• In-depth knowledge of network and application protocols cyber vulnerabilities exploitation techniques and adversary methodologies (TTPs).
• Proficient in analyzing various types of network data (e.g. Netflow PCAP custom application logs) and employing network sensors to support defensive cyber operations and investigations.
• Experience with Network Intrusion Detection Systems (NIDS) and Intrusion Prevention Systems (IPS) for threat detection and response.
• Familiarity with Endpoint Detection and Response (EDR) agents for monitoring end-user devices.
• Proficiency in Security Information and Event Management (SIEM) forwarders for centralized logging and threat detection.
• Experience with vulnerability scanners to identify and assess weaknesses in systems and applications.
• Knowledge of log collectors for managing logs to improve incident response and threat hunting capabilities.
• Possess in current standing or be willing to complete applicable professional certifications aligned with the DOD Cybersecurity Workforce Framework: IAM Level II & III CSSP Analyst (*CYSA *CCE *GCTI Security GICSP GSEC CND CISSP CASP GCIA GCIH GCFA CEH) GIAC Open Source Intelligence (GOSI) Certification or SANS SEC487 Open-Source Intelligence (OSINT) Gathering and Analysis course). *Preferred certifications - CySA CCE GCTI.
• Possess expertise in using Intelligence Community databases analytical tool suites and commercial tool suite applications.
• Experience gathering analyzing correlating or evaluating information from various resources such as law enforcement databases.
• Experience with Law Enforcement/Counterintelligence (LE/CI) Operations and/or Cyberspace Operations.
• Possess knowledge of network and application protocols cyber vulnerabilities and exploitation techniques and cyber threat/adversary methodologies (TTPS).
• Knowledge of building extended cybersecurity analytics.
• Must have demonstrated experience briefing Senior Executive Service (SES) and General Officer/Flag Officer (GO/FO) leadership.
• Active TS/SCI with CI Poly eligibility.
• 10 years of experience may have supervisory or lead experience.

Preferred Qualifications:

• Fluency in either Chinese Mandarin Korean Japanese or Russian (desired but not required).
• Experience in intelligence-driven defense and/or Cyber-Kill Chain methodologies.
• Possess an understanding of Cloud Security Architecture and related aspects of cybersecurity operations/analysis (e.g. incident response & management forensic media analysis malware analysis/reverse-engineering cyber threat intelligence analysis etc.) and security architecture.
• Degree in one of the following fields from an ABET or NCAE-C accredited institution: Information Technology Computer Science Cybersecurity Data Science Information Systems or Software Engineering.

Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the worlds leading mission capability integrator and transformative enterprise IT provider we deliver trusted highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land sea space air and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day our employees do the cant be done by solving the most daunting challenges facing our customers. Visit to learn how were keeping people around the world safe and secure.