cyber intelligence analyst

Clear Resolution Consulting, LLC

Job Name: Senior All Source Analyst
 Level: Senior
 Location: Fort Meade, Maryland
 Remote Work: No
 Required Clearance: TS/SCI with Polygraph
 
Position Type: Immediate opening
 
PRIMARY RESPONSIBILITIES: 
<ul>
<li>Provide all-source JIPOE support to offensive cyber operations / defensive cyber operations (OCO/DCO) planning and execution to include production of cyber related Intelligence Estimates and associated products.</li>
<li>Produce bulletins and briefs related to assigned area of responsibility.</li>
<li>Monitor threat activities to develop specific cyber indicators to support the USCYBERCOM role in the Defense Warning Program.</li>
<li>Provide scenario development, white cell, or role-playing support to cyber related exercises, as required.</li>
</ul>
MINIMUM REQUIREMENTS: 
<ul>
<li>Minimum 12 years of experience as an All-Source Analyst</li>
<li>Master's Degree</li>
<li>TS/SCI clearance with a polygraph</li>
</ul>
COMPANY DESCRIPTION: 
Clear Resolution Consulting, LLC provides Intelligence Analysis, Business Management, Cyber Operations, and Information Technology Consulting Services to the Department of Defense (DoD), Intelligence Community (IC) and other Federal Agencies.
 This is a full-time position with employee and family medical, dental, and vision plans, life and AD&D insurance, generous holidays and personal leave, 401(K) with company matching, short-term/long-term disability insurance, and tuition assistance.
 Clear Resolution Consulting, LLC is an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy and gender identity), national origin, political affiliation, sexual orientation, marital status, disability, genetic information, age, membership in an employee organization, retaliation, parental status, military service, any other non-merit factor, or any other characteristic protected by law.
 
COMPENSATION
 
CRC offers a generous benefits package for full time employees, including 4 weeks PTO accrual for new employees with increases at milestone anniversaries, 11 paid holidays, employer-paid life and disability insurance, optional supplemental life insurance, family health, dental and vision benefits with no waiting period, 401(k) with up to 6% employer match available after 30-day waiting period, generous tuition assistance for higher education or career related certifications, flexible work schedules, and opportunities for referral bonuses.
 
Base salaries at CRC are determined by various factors, including work location, an individual's education, knowledge, skills, experience, as well as contract-specific affordability and organizational requirements. The projected salary range for this position is $120,000 to $141,500. The estimate displayed represents the typical salary range for this position and is just one component of CRC's total compensation package.

All-Source Analyst (Production/MIDB) , Senior

MAERSK

<div>Data Scientist &ndash; Cyber Threat Intelligence
Joining Maersk will embark you on a great journey with career development in a global organisation.
You will be exposed to a wide and challenging range of business issues through regular engagement with key stakeholders across all management levels within Maersk. You will work and communicate across geographical and cultural borders that will enable you to build a strong professional network. We believe people thrive when they are in charge of their career paths and professional growth. We will provide you with opportunities to broaden your knowledge and strengthen your technical and professional foundation.
By choosing Maersk, you join not only for the role, but for a career. From here your path may take you towards extended responsibilities within A.P. Moller &ndash; Maersk.
We aim to be a world-class professional IT organisation that delivers business value through automation, standardisation and innovation. We believe in empowerment where each of us takes ownership and responsibility for developing and implementing new ways of working.
At Maersk we value the diversity of our talent and will always strive to recruit the best person for the job &ndash; we value diversity in all its forms, including but not limited to: gender, age, nationality, race, sexual orientation, disability or religious beliefs. We are proud of our diversity and see it as a genuine source of strength for building high performing teams.
Role Purpose:
As a Data Scientist in the Cyber Operations department, your primary role will be to turn data into actionable insights, leveraging tools, statistical models, AI and Machine Learning to enable data-driven decision-making. As part of this, you will also contribute to the design and delivery of data engineering and integrations capabilities that enable Cyber Operations to automate workflows and generate intelligence from security data at scale.
You will report to the Head of Cyber Threat Intelligence (CTI), working alongside other CTI Analysts and Data Scientists, as a Subject Matter Expert (SME), working closely with other Cyber Security teams. You will be accountable for the effective collection, processing and analysis of large datasets to generate informative and actionable insights.
This is a unique opportunity to provide input into the future direction and operation of the CTI function within Maersk, including the Cyber Operations department&rsquo;s AI strategy.
Key Responsibilities:
<ul><li>Accountable for the effective collection, processing and analysis of large datasets to generate informative and actionable insights.
</li><li>Identify patterns, trends, and anomalies in security tooling, leveraging AI and data science techniques to inform decision‑making.
</li><li>Host, manage and interrogate databases to deliver automated and ad hoc reporting requests on security data.
</li><li>Develop and refine causal inference, predictive, statistical and machine learning models to enable threat detection and intelligence generation.
</li><li>Produce daily visual management dashboards using real‑time data, enabling cross‑team collaboration and swift identification of issues and focus areas.
</li><li>Facilitate performance tracking of People, Processes and Technologies against KPIs to drive continuous improvement and operational reporting.
</li><li>Disseminate curated data via secure APIs and MCP servers, and present work products in the stakeholder&rsquo;s desired format, ensuring access is controlled by least privilege.
</li><li>Scope and respond to Requests for Information (RFIs) from stakeholders by providing timely data and analysis outputs.
</li><li>Responsible for developing, maintaining and enhancing the use of LLMs for Cyber Security use cases.
</li><li>Enhance threat intelligence capabilities by developing processes where automation and AI‑assisted analysis can improve efficiency.
</li><li>Accelerate automation and enable safe AI/GenAI adoption via secure data access and tool integrations that support agile workflows.
</li><li>Build and maintain data ingestion pipelines and connectors for internal and external cyber data sources (API-first, using MCP where available).
</li><li>Normalise, enrich and curate cyber security datasets, maintaining provenance (source, timestamp, confidence/quality indicators where available) to support trusted decision‑making.
</li><li>Implement engineering quality practices for pipelines and services, and document/maintain processes.
</li></ul>Relevant Services: Cyber Threat Intelligence
<ul><li>Senior Cyber Leadership Team
</li><li>Head of Security Operations Centre
</li><li>Team of SOC Analysts
</li><li>Threat Hunting
</li><li>Red Team
</li><li>Cyber Defence Engineering
</li><li>Identity &amp; Access Management
</li><li>Strategy Owners
</li><li>Cyber Risk Team
</li><li>Cyber Security Officers
</li><li>Wider Maersk Organisation
</li></ul>Primary Stakeholders: External Cyber Threat Intelligence source providers
Required Skills &amp; Experience:
Professional qualifications:
<ul><li>Bachelor&rsquo;s degree in computer science, Engineering, Mathematics, Statistics, Data Science, or a related discipline (or an equivalent qualification).
</li><li>Certification or formal training in analytics engineering or data modelling (e.g. dimensional modelling, metrics design, data quality).
</li><li>Cloud certification or training in AWS or equivalent platforms, such as AWS Certified Data Engineer &ndash; Associate and/or AWS Certified Developer &ndash; Associate (or equivalent).
</li><li>Certification or formal training in Applied AI or Generative AI fundamentals.
</li><li>Cyber security or threat intelligence training is beneficial but not essential.
</li><li>Security certifications such as CEH, OSCP, SANS, or equivalent are desirable but not essential.
</li></ul>Technical skills &amp; knowledge:
<ul><li>Proficient in writing complex SQL queries for repeatable operational analytics and reporting.
</li><li>Proficient in applied Data Science / Machine Learning using Python, TypeScript/Node.js, or similar languages.
</li><li>Solid understanding of Forecasting process and algorithms and causality.
</li><li>Proficient in data visualization tools and techniques to effectively deliver complex findings.
</li><li>Solid cloud fundamentals, preferably with AWS (e.g., S3, Lambda, Glue, Step Functions, API Gateway, CloudWatch, or equivalent services).
</li><li>Strong data engineering and analytics fundamentals, including building reliable ETL/ELT pipelines, orchestration, data modelling, and implementing data quality controls.
</li><li>Familiarity with Model Context Protocol (MCP) or similar integration frameworks is desirable.
</li><li>Basic understanding of the intelligence lifecycle is beneficial but not essential.
</li><li>Awareness of the cyber threat landscape, including common adversary tactics, techniques, and procedures (TTPs) is desirable but not essential.
</li><li>Knowledge of standard methods / systems for analysis and prioritisation of vulnerabilities e.g. CVE, CVSS, is desirable but not essential.
</li><li>Understanding of political, operational, and security risks in the maritime, transport, and logistics sectors is preferable.
</li></ul>Professional qualifications:
<ul><li>Bachelor&rsquo;s degree in Computer Science, Engineering, Mathematics, Statistics, Data Science, or a related discipline (or an equivalent qualification).
</li><li>Certification or formal training in analytics engineering or data modelling (e.g. dimensional modelling, metrics design, data quality).
</li><li>Cloud certification or training in AWS or equivalent platforms, such as AWS Certified Data Engineer &ndash; Associate and/or AWS Certified Developer &ndash; Associate (or equivalent).
</li><li>Certification or formal training in Applied AI or Generative AI fundamentals.
</li><li>Cyber security or threat intelligence training is beneficial but not essential.
</li><li>Security certifications such as CEH, OSCP, SANS, or equivalent are desirable but not essential.
</li></ul>Technical skills &amp; knowledge:
<ul><li>Proficient in writing complex SQL queries for repeatable operational analytics and reporting.
</li><li>Proficient in applied Data Science / Machine Learning using Python, TypeScript/Node.js, or similar languages.
</li><li>Solid understanding of Forecasting process and algorithms and causality.
</li><li>Proficient in data visualization tools and techniques to effectively deliver complex findings.
</li><li>Solid cloud fundamentals, preferably with AWS (e.g., S3, Lambda, Glue, Step Functions, API Gateway, CloudWatch, or equivalent services).
</li><li>Strong data engineering and analytics fundamentals, including building reliable ETL/ELT pipelines, orchestration, data modelling, and implementing data quality controls.
</li><li>Familiarity with Model Context Protocol (MCP) or similar integration frameworks is desirable.
</li><li>Basic understanding of the intelligence lifecycle is beneficial but not essential.
</li><li>Awareness of the cyber threat landscape, including common adversary tactics, techniques, and procedures (TTPs) is desirable but not essential.
</li><li>Knowledge of standard methods / systems for analysis and prioritisation of vulnerabilities e.g. CVE, CVSS, is desirable but not essential.
</li><li>Understanding of political, operational, and security risks in the maritime, transport, and logistics sectors is preferable.
</li></ul>Professional skills:
<ul><li>Excellent written and verbal communication skills (English) and able to be understood by both technical and non-technical personnel.
</li><li>A motivated and self-starting individual with ability to self-task.
</li><li>Strong interpersonal skills including, teamwork/collaboration and relationship building.
</li><li>Excellent time-management and workload prioritisation skills.
</li><li>Positive, can-do attitude, engaging, ability to accommodate agile methodologies and ability to work well under pressure.
</li><li>Can accommodate requirements that may from time-to-time, fall beyond CTI, into other Cyber Security disciplines.
</li></ul>Experience :
<ul><li>5+ years previous experience operating in a data analytics, science or engineering role, ideally within cyber security or similar.
</li><li>At least two years of experience with visualisation tools such as Power BI, MS Fabric, or Amazon QuickSight.
</li><li>Experience handling sensitive data and applying governance practices&mdash;access control, secrets management, encryption, and audit‑ready logging.
</li><li>Experience with API engineering and automation in a security operations context is desirable but not essential.
</li><li>Experience working with CTI teams, threat intelligence data, or TIP/SIEM integrations is desirable.
 </li></ul>Key Measures:
<ul><li>Timely dissemination of regular and ad-hoc products across the organisation.
</li><li>Application and review of existing processes (improvements through automation, data quality, and repeatable workflows).
</li><li>Delivery of reliable Cyber Security data feeds and curated outputs to internal consumers via APIs/MCP.
</li><li>Reliability of data pipelines and interfaces (e.g., freshness/latency, error rates, successful runs, and recovery time).
</li></ul>Maersk is committed to a diverse and inclusive workplace, and we embrace different styles of thinking. Maersk is an equal opportunities employer and welcomes applicants without regard to race, colour, gender, sex, age, religion, creed, national origin, ancestry, citizenship, marital status, sexual orientation, physical or mental disability, medical condition, pregnancy or parental leave, veteran status, gender identity, genetic information, or any other characteristic protected by applicable law. We will consider qualified applicants with criminal histories in a manner consistent with all legal requirements. 
We are happy to support your need for any adjustments during the application and hiring process. If you need special assistance or an accommodation to use our website, apply for a position, or to perform a job, please contact us by emailing accommodationrequests@maersk.com .</div>

Data Scientist – Cyber Threat Intelligence

Amentum

<div></div><div><div><div><div><div>RED CELL CYBER ANALYST (Operational Position)
The Red Cell Cyber Analyst is responsible for providing direct strategic and tactical analytic cyber support to the DoW Red Cell. The Red Cell Cyber Analyst drives cyber operations by selecting cyber targets, identifying gaps in cyber architecture, and developing cyber emulative courses of action pertaining to specific vulnerability assessments. The Red Cell Cyber Analyst is responsible for providing advice to tactical partner elements and Red Cell personnel in planning adversarial cyber warfare courses of action. The Red Cell Cyber Analyst is responsible for providing advisory support concerning network and infrastructure analysis to enable adversarial cyber and/or electronic warfare operations in support of DoW Red Cell operations. The Red Cell Cyber Analyst will be expected to travel in direct support of vulnerability assessments.

The Red Cell Cyber Analyst acts as subject matter expert on a variety of complex topics related to cyber threats. Specifically, the Red Cell Cyber Analyst is responsible for researching and identifying positions, access points, relationships, organizations, and other potential vulnerabilities in support of DoW Red Cell operations. They are expected to use advanced analytic skills/ tools and maintain knowledge of industry best practices related to cyber red teaming. They report directly to the Red Cell Cyber Analysis Lead.

Responsibilities/Tasks

The Red Cell Cyber Analyst shall:
<ul>
<li>Characterize the adversary&rsquo;s cyber capabilities. Research the structure, ideology, intentions, tactics, and capabilities of adversarial cyber organizations to develop threat characterization using a combination of both classified and unclassified sources.</li>
<li>Contribute constructively to cyber threat emulation. Identify information requirements, develop assessment cyber strategies, assist building Red Cell collection plans, identify information sources, and develop and conduct research of publicly available information (PAI) in order to determine adversary cyber courses of action and relevant priority information requirements (PIRs).</li>
<li>Identify, map, and plan potential exploitation of key telecommunication networks.</li>
<li>Analyze and characterize cyber systems and conduct analysis appropriate to the program. Identify essential functions, tasks, and critical assets necessary to perform analysis as determined by the program leader.</li>
<li>Develop courses of action that a cyber adversary might employ against customer personnel, equipment, facilities, networks, information and information systems, infrastructure, and supply chains.</li>
<li>Facilitate timely information management flow from DoW Red Cell partner elements and other entities supporting DoW Red Cell operations.</li>
<li>Support field assessments from a cyber adversary perspective.</li>
<li>Synthesize findings to support vulnerability identification, course of action development, protection studies, trend analyses, risk analysis, and mitigation strategies.</li>
<li>Develop a comprehensive understanding of the implications of cyber vulnerabilities discovered and fuse those findings with the systems analysis to determine impacts to the national and military missions they support.</li>
<li>Prepare activity reports including out briefs, senior leader briefs, interim progress reports (IPRs), white papers, after action reviews, final reports, risk analysis products, and other documents necessary to convey assessment findings to customers, partners, and other stakeholders.</li>
<li>Be able to explain network/system mechanisms to non-cyber personnel in order to facilitate better analysis and operations.</li>
<li>Should have a diverse understanding of network and information security operations, network exploitation, and telecommunications.</li>
</ul>
Required Skills/Qualifications

<ul><li>Four-year BS/BA degree with two years applicable experience as a cyber analyst; or associate&rsquo;s degree with four years applicable experience as a cyber analyst; or eight years of applicable experience as a cyber analyst.</li>
<li>Proficient in understanding, analyzing and summarizing comprehensive and complex technical, contractual, and research information/data.</li>
<li>Ability to write about complex topics in a way that will effectively capture and transmit the message to non-cyber personnel.</li>
<li>Ability to communicate complex informational concepts or ideas in a confident and well-organized manner through verbal, written, and visual means.</li>
<li>Ability to accurately and completely source all data used in products.</li>
<li>Ability to develop or recommend analytic approaches to problems for which information is incomplete or for which no precedent exists.</li>
<li>Ability to think like and emulate actions of threat actors.</li>
<li>Possess a current driver's license.</li>
<li>Capable of operating a rental vehicle.</li>
<li>Active TS/SCI clearance required.</li>
<li>U S citizenship required.</li>
<li>Travel is up to 20%</li>
</ul>
Desired Skills/Qualifications

<ul><li>Understand and be well versed in common cyber threat terminology, vulnerability and penetration test principles and methodologies; possess basic knowledge of cyber incident and response forensics and related current events.</li>
<li>Familiarity with Log Analysis, Packet Analysis OSI Model, Network Architectures, NIST, DIA-CAP, RMF, and Information Operations, threat intelligence activities including the collection of and tracking threat actors, digital forensics incident response; and threat hunting methodologies.</li>
<li>Experience performing attack analysis or Red Cell penetration testing against operational computer networks including experience in Windows Security, Network Security, Linux/Unix Security, Database security, or Mainframe Security.</li>
<li>Knowledge of common computer/network infections (virus, trojan, etc.) and methods of infection (ports, attachments, etc.).</li>
<li>Knowledge of computer networking fundamentals (i.e., basic computer components of a network, types of networks, etc.)</li></ul> 

</div></div></div></div>
Compensation Details:
105,000 
The compensation range or hourly rate listed for this position is provided as a good-faith estimate of what the company intends to offer for this role at the time this posting was issued. Actual compensation may vary based on factors such as job responsibilities, education, experience, skills, internal equity, market data, applicable collective bargaining agreements, and relevant laws. 
Benefits Overview:
Our health and welfare benefits are designed to support you and your priorities. Offerings include:<ul>
<li>
Health, dental, and vision insurance</li>
<li>
Paid time off and holidays</li>
<li>
Retirement benefits (including 401(k) matching)</li>
<li>
Educational reimbursement</li>
<li>
Parental leave</li>
<li>
Employee stock purchase plan</li>
<li>
Tax-saving options</li>
<li>
Disability and life insurance</li>
<li>
Pet insurance</li></ul> 
Note: Benefits may vary based on employment type, location, and applicable agreements. Positions governed by a Collective Bargaining Agreement (CBA), the McNamara-O'Hara Service Contract Act (SCA), or other employment contracts may include different provisions/benefits. 
Original Posting:
02/23/2026 - Until Filled
Amentum anticipates this job requisition will remain open for at least three days, with a closing date no earlier than three days after the original posting. This timeline may change based on business needs. 
Amentum is proud to be an Equal Opportunity Employer. Our hiring practices provide equal opportunity for employment without regard to race, sex, sexual orientation, pregnancy (including pregnancy, childbirth, breastfeeding, or medical conditions related to pregnancy, childbirth, or breastfeeding), age, ancestry, United States military or veteran status, color, religion, creed, marital or domestic partner status, medical condition, genetic information, national origin, citizenship status, low-income status, or mental or physical disability so long as the essential functions of the job can be performed with or without reasonable accommodation, or any other protected category under federal, state, or local law. Learn more about your rights under Federal laws and supplemental language at Labor Laws Posters.</div>

Red Cell Cyber Analyst

Sony

<div>Sony Corporation of America , located in New York, NY, is the U.S. headquarters of Sony Group Corporation, based in Tokyo, Japan. Sony's principal U.S. businesses include Sony Electronics Inc., Sony Interactive Entertainment LLC, Sony Music Entertainment, Sony Music Publishing and Sony Pictures Entertainment Inc. With some 900 million Sony devices in hands and homes worldwide today, a vast array of Sony movies, television shows and music, and the PlayStation Network, Sony creates and delivers more entertainment experiences to more people than anyone else on earth. To learn more: www.sony.com/en . 
 
<div><div>POSITION SUMMARY
</div><div>Sony Corporation of America ( SCA,) is seeking an Intern, Cyber Threat Intelligence to join the Corporate Information Security Division (CISD) organization located in Reston, VA for the 2026 summer internship program.
This position will assist the Global Security Incident Response Team (GSIRT). The team is a pivotal part of Sony&rsquo;s program to secure its information assets, services, and the products that depend on them, building trust with customers and stakeholders and protecting the privacy of Sony&rsquo;s employees and customers. This position is for those interested in pursuing a career in cyber security, cyber threat intelligence, intrusion detection, and incident response on a global scale.
</div><div>The CISD summer internship program is designed to provide skills, knowledge, and hands-on work experience in the information security and privacy industry, supporting the personal growth of our interns as well as Sony business results.
</div><div>This 12‑week summer internship runs from June through August and offers flexibility to work either hybrid or fully remote. 
</div><div>RESPONSIBILITIES :
</div><div><ul><li>Execute the stages of the Intelligence Lifecycle to deliver tailored network defense intelligence assessments to relevant Sony stakeholders.
</li></ul></div><div><ul><li>Contribute to a daily summary report on cyber threat news relevant to Sony group companies.
</li></ul></div><div><ul><li>Write high-quality threat reports tailored to Sony group companies, regions or industries where Sony operates .
</li></ul></div><div><ul><li>Maintain awareness of the latest emerging threats and exploitation vectors
</li></ul></div><div><ul><li>Perform research and analysis of data from various sources to help protect Sony from advanced threats.
</li></ul></div><div><ul><li>Compile, analyze, and display relevant team and threat metrics .
</li></ul></div><div><ul><li>Support projects to improve data collection, interpretation processes and initiatives regarding threat intelligence and information security.
</li></ul></div><div><ul><li>Develop and follow detailed operational processes and procedures.
</li></ul></div><div><ul><li>Assist other Security and Incident Response Teams
</li></ul></div><div><ul><li>Participate in the incident response lifecycle and gain familiarity with relevant methodologies, including detection, analysis, remediation, and deployment of countermeasures.
</li></ul></div><div><ul><li>Learn how to use common enterprise security tools and techniques during a computer security investigation.
</li></ul></div><div><ul><li>Perform other duties as assigned.
</li></ul></div><div><ul><li>Honesty, trustworthiness, and ethical conduct are material requirements for the responsibilities outlined above.
</li></ul></div></div><div><div>QUALIFICATIONS:
</div><div><ul><li>Current student pursuing a bachelor's or master's degree in computer science , Cyber Security, Information Technology, Criminal Justice, Intelligence Analysis, or related field
</li></ul></div><div><ul><li>Familiarity with networking and cybersecurity concepts.
</li></ul></div><div><ul><li>Exceptional research and analytical skills.
</li></ul></div><div><ul><li>Self-motivated and eager to work in a hybrid/remote environment with a small team.
</li></ul></div><div><ul><li>Detail-oriented, with the ability to multitask and quickly apply new concepts to accomplish assignments.
</li></ul></div><div><ul><li>Excellent communication and organizational skills .
</li></ul></div><div><ul><li>Proficient in Microsoft Office .
</li></ul></div><div><ul><li>Passionate about coding and automation.
</li></ul></div><div><ul><li>Previous experience through work or internship preferred.
</li></ul></div><div><ul><li>Familiarity with at least one programming language preferred.
</li></ul></div><div><ul><li>Fluency in Japanese is a plus.
</li></ul></div><div><ul><li>All candidates must be authorized to work in the USA.
</li></ul></div><div>The hourly rate for this internship depends on education level: $24.00 per hour for undergraduate candidates and $25.00&ndash;$27.00 per hour for graduate candidates. The individual will be paid hourly and eligible for overtime. 
</div><div>#LI-SC1
</div></div>All qualified applicants will receive consideration for employment without regard to any basis protected by applicable federal, state, or local law, ordinance, or regulation.
Disability Accommodation for Applicants to Sony Corporation of America
Sony Corporation of America provides reasonable accommodation for qualified individuals with disabilities and disabled veterans in job application procedures. For reasonable accommodation requests, please contact us by email at careers@sonyusa.com or by mail to: Sony Corporation of America, Human Resources Department, 25 Madison Avenue, New York, NY 10010. Please indicate the position you are applying for.
We are aware that unauthorized individuals or organizations may attempt to solicit personal information or payments from job applicants by impersonating our company through fraudulent job postings. We take these matters seriously but cannot control third-party websites. To protect your personal information, please verify that any job posting you respond to also appears on our official Careers page: www.sonyjobs.com . Please also be advised that we never request personal identifying information (such as Social Security numbers, bank details, or copies of identification documents) during the initial stages of our application process. If you have any doubts about the authenticity of a job posting or communication, please contact careers@sonyusa.com before submitting any information.
Right to Work (English/Spanish)
E-Verify Participation (English/Spanish)</div>

Intern, Cyber Threat Intelligence

Information Technology Senior Management Forum

Principal Associate, Cyber Product Owner (Cyber Intelligence)

Pine Point Group

<div>Location: MD

Experience: 8 years

Clearance Level: TS/SCI clearance with a CI polygraph (or Full Scope) 


Overview:
Serve as an all-source intelligence analyst on a computer network operations (CNO) intelligence team, focused on the threat to networked weapons platforms and U.S. and DoD information networks. Conduct research and evaluate technical and all-source intelligence with specific emphasis on network operations and cyber warfare tactics, techniques, and procedures. Analyze network events to determine the impact on current operations and conduct all-source research to determine adversary capability and intent. Produce high-quality papers, presentations, recommendations, and findings for senior U.S. government intelligence and network operations officials. Develop and refine the daily operations of a growing DoD customer.
<ul>
<li>A Cyber Analysis Support Specialist (CASS) should be able to perform intelligence analysis of cyber related targets and technologies. These analysts must have the ability to select pertinent data from a variety of sources to include SIGINT, HUMINT, IMINT, etc.</li>
<li>This position requires experience in in-depth reporting styles, specifically assessment writing (not KLs, STRUMs, TACREPs, etc.)</li>
<li>A CASS must have in-depth knowledge of digital networks and telecommunications methods.</li></ul> 


Responsibilities: Sample Duties
<ul>
<li>Performing tasks associated with the SIGINT and/or other intelligence disciplines&rsquo; production cycle, including researching, tasking, analysis, reporting, assessing, and interacting with customers.</li>
<li>Analyzing and assessing technical and operational vulnerabilities in U.S./DOD or foreign current or emerging technologies or operations, and determining risk to U.S. networks of interest posed by adversarial systems, activities or operations.</li>
<li>Analyzing all-source intelligence data, identifying critical threat information, researching historical threat reporting, and crafting assessments in support of customer information needs.</li>
<li>Performing all-source research to identify and report on the intentions and capabilities of adversaries, state and non-state sponsored, to threaten, exploit or otherwise disrupt networks of interest to the U.S. and its allies.</li>
<li>Assisting with the development of databases and other knowledge repositories on adversary information warfare and hacker capabilities, intentions and supporting infrastructures.</li>
<li>Compiling and correlating data sets to determine levels of threats and vulnerabilities to U.S. network systems.</li>
<li>Producing threat/vulnerability assessments.</li>
<li>Performing risk and opportunity assessments through synthesis of information across intelligence disciplines and open-source information.</li>
<li>Supporting NTOC efforts to partner with other organizations on the identification of vulnerabilities and corresponding threats with the goal of influencing mitigation strategies and solutions.</li>
<li>Researching and analyzing data using available and appropriate analytic tools.</li>
<li>Assisting technical personnel in developing automated analytic tools by providing specific information about adversary targets and techniques.</li>
<li>Developing end-product report drafts and entering them into report production systems.</li>
<li>Assisting in the evaluation and staffing of Information Needs (IN); interacting with customers, other production elements and data acquisition offices in order to meet customer needs.</li>
<li>Scheduling meetings, analytic exchanges, organizing data and providing threat analysis support to branch and division-level managers.</li>
<li>Participating in team building research efforts, sharing analytical techniques and research methodologies.</li>
<li>Contributing to knowledge management by entering sources and analytic findings into appropriate databases and other repositories on a timely basis.</li>
<li>Documenting reports and customer feedback in local Request for Information (RFI) tracking databases and other recording systems.</li>
<li>Identifying adversary presence in the Internet and using visualization tools to map the information systems, networks and major servers they use.</li>
<li>Using research and analytic findings to identify network associations and map them in diagram/topology presentations.</li>
<li>Performing baseline and secondary analysis and providing visualization support by using Analyst Notebook and NetViz or other visualization tools.</li>
<li>Making recommendations for additional collection possibilities when and where possible.</li>
<li>Conducting and tracking behavior analysis and characterization of adversary decision processes, their technological dependencies and social network connections.</li>
<li>Documenting all research and analysis using standard document and network mapping tools.</li></ul> 


Qualifications:
<ul><li>Shall have a minimum of eight (8) continuous years of work experience in intelligence analysis or a related field, or a combination of a minimum of five (5) continuous years of work experience in intelligence analysis or a related field and a Bachelors degree in an applicable (math, science, computers, engineering) field. Work experience shall include five (5) years of IC or related experience in intelligence analysis.</li>
<li>Shall have demonstrated expertise all forms of analysis reporting and experienced with creating each product type, and thus be able to organize training for other team members on analysis, tools, or reporting.</li>
<li>Shall have demonstrated expertise with relevant CNO and SIGINT tools and databases used for the customer mission, and communications skills that include the ability to provide formal documentation of analysis and/or research results. Shall be considered a Subject Matter Expert in one or more fields appropriate to Intelligence Analysis or Computer Networking technologies, and be able to serve as a Subject Matter Expert for working groups and meetings with partner organizations I agencies.</li>
<li>Shall have demonstrated expertise in analyzing intelligence information and technical data, analyzing exploitation opportunities, documenting information and processes, gathering intelligence information, interpreting analytical results. Performing Internet research, writing and editing skills at a technical/professional level, and managing internal and external customer relations. Shall be an effective writer and verbal communicator.</li></ul> 


Required Tools: ANCHORY/MAUI, MARINA/YACHTSHOP, PATHFINDER, PINWALE/UIS, XKEYSCORE 


Preferred Tools: BANYAN, CADENCE, CROSSBONES, FASCIA, MAINWAY, TUNINGFORK, TRICKLER, UTT 


Equal Employment Opportunity Employer; all qualified applicants are encouraged to apply and will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, or veteran status.</div>

Cyber Analysis Support Specialist (Senior)

Gargash Group

<div>
 
 
 Job Purpose:
 
 
 
 
 
 
 The Senior Cybersecurity Analyst is responsible for safeguarding the group&rsquo;s information systems and sensitive data from cyber threats. This job is responsible for analysing complex security issues, implementing effective security measures, and providing guidance to team members.
 
 
 
 
 
 
 Responsibilities:
 
 
 
 
 
 
 &bull; Conduct in-depth analysis of security incidents, vulnerabilities, and breaches, providing timely and accurate reports to management.
 
 
 &bull; Collaborate with cross-functional teams to ensure that security measures are integrated into all aspects of the group&rsquo;s operations.
 
 
 &bull; Monitor and assess the group&rsquo;s network, systems, and applications for potential security risks and
 
 
 vulnerabilities.
 
 
 &bull; Perform penetration testing, vulnerability assessments, and security audits to identify weaknesses and recommend mitigation strategies.
 
 
 &bull; Design and implement advanced security controls to protect sensitive data and maintain regulatory compliance.
 
 
 &bull; Provide guidance and mentorship to junior cybersecurity team members, assisting with skill
 
 
 development and knowledge enhancement.
 
 
 &bull; Stay current with emerging threats, attack techniques, and industry trends to continuously improve the group&rsquo;s security posture.
 
 
 &bull; Lead incident response efforts, coordinating with relevant teams to contain, mitigate, and recover from security incidents.
 
 
 &bull; Collaborate with third-party vendors and partners to assess their security practices and ensure
 
 
 compliance with established standards.
 
 
 &bull; Participate in the evaluation and deployment of new cybersecurity technologies, tools, and solutions.
 
 
 &bull; Contribute to the development of security awareness training programs for employees to enhance their understanding of cybersecurity best practices.
 
 
 &bull; Prepare and deliver comprehensive reports and presentations to convey security-related information
 
 
 to technical and non-technical audiences, including senior management.
 
 
 &bull; Serve as an L3 Cybersecurity Engineer.
 
 
 &bull; Perform deep analysis of security incidents to identify the full kill chain.
 
 
 &bull; Create SOC/MDR related use cases and write detections.
 
 
 &bull; Act as a subject matter expert for any cyber alert or incident that occurs.
 
 
 &bull; Conduct L3 level investigations to determine the root cause of any cyber incident or alert.
 
 
 &bull; Work with blue team tools and solutions (EDR, XDR, SIEM, Email Security, DLP, DDoS, WAF, Proxy) and analyse security alerts generated by these tools.
 
 
 &bull; Create cybersecurity use cases for SOC.
 
 
 &bull; Perform malware analysis.
 
 
 &bull; Correlate different log sources and understand logs from various end devices, servers, network devices, and applications.
 
 
 &bull; Implement security solutions in collaboration with respective vendors.
 
 
 &bull; Conduct threat intelligence actions and investigations.
 
 
 &bull; Perform application security checks and reviews, implementing best application security controls.
 
 
 &bull; Manage cloud security for the group and work with cloud security tools (Microsoft Azure).
 
 
 &bull; Work on endpoint security.
 
 
 &bull; Review and manage access control from a security perspective.
 
 
 &bull; Implement security projects.
 
 
 &bull; Conduct in automation using scripting languages and programming to automate day-to-day tasks in cybersecurity, build AI bots, identify patterns in large datasets that could signify malicious activity, and use AI tools to proactively search for threats within a network.
 
 
 &bull; Uphold company values throughout business practices and utilise sound judgment in decision making.
 
 
 &bull; Any other additional duties as may be required by management based on needs of the business.
 
 
 
 
 
 
 Requirements:
 
 
 
 
 
 
 &bull; Bachelor's or Master's degree in Computer Science, Information Security, or a related field.
 
 
 &bull; Certification in GIAC DFIR, Blue Team Level 1 and Blue Team Level 2 required.
 
 
 &bull; Relevant certifications (e.g., CISSP, CISM, CISA, CEH) are highly desirable.
 
 
 &bull; A minimum of 5-7 years of experience in a similar role in Cyber Security.
 
 
 &bull; Proven experience as a cybersecurity analyst or similar role, demonstrating progressive
 
 
 responsibilities.
 
 
 &bull; Experience with AI-based cybersecurity tools including Darktrace, Security Copilot, SOAR, Next-gen SIEM, CrowdStrike, AI-based Threat Intel, and Microsoft Security deployment (Defender, Purview DLP,IAM).
 
</div>

Senior Cybersecurity Analyst

Search 6727+ Cyber intelligence analyst jobs near you this March. New roles added regularly across leading industries. Apply today.