Principal Threat Analyst, Mandiant, Intelligence Services

You will use data to solve investigative problems and deliver results under pressure. As a Principal Analyst in our Advanced Intelligence Access (AIA) program, you will be a trusted advisor, providing clients with direct access to GTIG's comprehensive risk intelligence, including raw data.

Responsibilities

• Develop and apply problem-solving techniques to data sets to perform continuous hunting activities within customer environments for previously unidentified risks.
  
• Utilize Mandiant and supported vendor technologies to conduct investigations and examine endpoint and network-based sources of evidence.
  
• Apply CTI research, analysis, and report writing skills to service strategic, operational, and tactical audiences.
• Correlate intelligence to develop deeper understandings of tracked threat activity.
  
• Ultilize tools and best practices for tracking advanced threats, tools, techniques, and procedures (TTPs) of attacker’s motivations, and industry and attacker trends.

Minimum qualifications:

• Bachelor's degree or equivalent practical experience.
• 8 years of experience in a customer-facing investigative role in cyber security (e.g., Network Forensics Analyst, Threat Intelligence Analyst).
• Experience engaging with, and presenting to, technical stakeholders and executive leaders.
  
• Must possess an active Top Secret/SCI security clearance with current polygraph.
• Ability to travel up to 25% internationally.
  
  

Preferred qualifications:

• Experience with CTI methodologies and application within cyber security organizations.
  
• Experience in the analysis of CTI, supporting monitoring, detection, and response capabilities.
  
• Experience in using tools for analysis such as intrusion operations, enterprise security controls, log analysis, network flow and traffic analysis, incident response processes, cyber attack lifecycles and models.
• Experience in security operations (SOC), incident response, threat hunting, IT compliance or equivalent.
  

This position requires onsite client-facing work two to four days a week in Reston, VA.