cyber intelligence analyst

DTS Solution

Role and Responsibilities 
 
 <div>
 <div>
 <ul>
 <li>
<i> </i> 
 Work as a Cyber Threat Intel Analyst in DTS Solution   HawkEye CSOC cyber command center.<br> </li>
 <li>
<i> </i> 
 Analyze and research known indicators, correlate events, identify malicious activity, and discover new sources to provide early warning related to a variety of Cyber threats.<br> </li>
 <li>
<i> </i> 
 Monitor Open Source information feeds and threat actor activity to identify activity levels and indicators for Cyber threats and Cyber-attacks.<br> </li>
 <li>
<i> </i> 
 Identify Open Source Intelligence (OSINT) threats relevant to the DTS Solution - HawkEye CSOC customer s environment and develop relevant reports.<br> </li>
 <li>
<i> </i> 
 Provide daily (business day) collections, reviews, analysis and filtering of Open Source Intelligence (OSINT) and SOCMINT (Social Media Intelligence)<br> </li>
 <li>
<i> </i> 
 Identify and investigate malicious actors with the interest and capability to target client and its infrastructure.<br> </li>
 <li>
<i> </i> 
 Develop and provide a Cyber Threat Intelligence Report, Monthly Report and Quarterly Report and an Annual Report.<br> </li>
 <li>
<i> </i> 
 Reviews all current threat intelligence feeds in use, categorizes and prioritizes by relevancy.<br> </li>
 <li>
<i> </i> 
 Provide proactive APT hunting, incident response support, and advanced analytic capabilities.<br> </li>
 <li>
<i> </i> 
 Analyze threat information reports and intelligence summaries, trends, gaps, and methods of operation.<br> </li>
 <li>
<i> </i> 
 Review audit logs and identify any unusual or suspect behavior.<br> </li>
 <li>
<i> </i> 
 Initiates ad-hoc threat intelligence work parcel assignments for Tier I/II analysts and reviews/expands the SOC daily recurring activity SOP s.<br> </li>
 <li>
<i> </i> 
 Develops reports that can be sent for awareness to various groups and levels of leadership.<br> </li>
 <li>
<i> </i> 
 Engage constructively in cross-functional projects designed to improve DTS Solution - HawkEye CSOC and its customers  security postures.<br> </li>
 <li>
<i> </i> 
 Understanding of geo-political dynamics and how they affect the wider cyber threat landscape.<br> </li>
 <li>
<i> </i> 
 Experience using Cyber Kill Chain.<br> </li>
 <li>
<i> </i> 
 Expertise on in using Threat Intelligence Platforms (Recorded Future, Flashpoint, Blueliv, Anomali, ThreatIQ etc.)<br> </li>
 <li>
<i> </i> 
 Expertise in using Digital Risk Management platforms that looks for dark web activities, breaches,<br> </li>
 <li>
<i> </i> 
 Have a curated list of important threat intel fusion across various sources<br> </li>
 <li>
<i> </i> 
 Knowledge on dark web and accessing dark web forums, IRCs, chat groups etc.<br> </li>
 <li>
<i> </i> 
 Knowledge on APT groups and monitoring all activities through handlers<br> </li>
 <li>
<i> </i> 
 Curate newsletter and social media weekly posts based on weekly activities in the cyberspace.<br> </li>
 </ul>
 </div>
 </div>
 <div>
 <div>
 <div>
</div>
 </div>
 </div>
 <div>
 <div>
 Qualifications </div>
 </div>
 <div>
 <div>
 <ul>
 <li>
<i> </i> 
 4+ years of experience on extract and disseminate open source intelligence (OSINT)<br> </li>
 <li>
<i> </i> 
 Regional expertise as applied to threat actors<br> </li>
 <li>
<i> </i> 
 Familiarity with alternative analysis techniques and predictive analysis methodology<br> </li>
 <li>
<i> </i> 
 Experience with conducting intelligence investigations and familiarity with investigative tools, including Maltego, DomainTools, and VirusTotal<br> </li>
 <li>
<i> </i> 
 Familiarity with Threat Rating Methodology<br> </li>
 <li>
<i> </i> 
 Experience using Threat Intelligence Platforms (TIPs)<br> </li>
 <li>
<i> </i> 
 Active memberships with associations across the security and intelligence community<br> </li>
 </ul>
 </div>
 </div>
 <div>
 <div>
 <div>
</div>
 </div>
 </div>
 <div>
 <div>
 Certifications </div>
 </div>
 <div>
 <div>
 <ul>
 <li>
<i> </i> 
 Certified Ethical Hacker (CEH)<br> </li>
 <li>
<i> </i> 
 SANS Certified Intrusion Analyst (GCIA)<br> </li>
 <li><br></li></ul></div></div><div><div><div><div><div><div><div> </div>
 </div>
 <div>
 <div>
 <div></div></div></div></div></div></div></div></div>

Cyber Threat Intelligence Analyst

GLOBAL DIMENSIONS

<div><p><b>Global Dimensions is a HUBZone, service disabled, veteran-owned small business</b> based in Fredericksburg, VA. We are a dynamic, expanding company with exciting opportunities in language/culture, training/education/instruction, IT, cyber security, and intelligence (analysts, CI, HUMINT, SIGINT, etc.). Global Dimensions is currently seeking<b> a Junior Cyber Systems Analyst </b>for a position in <b>Quantico, Virginia.</b></p><p><b>
Junior Cyber Systems Analyst will:</b></p><ul>
<li>
Evaluate the cybersecurity stance of a USMC defense program, ensuring it adapts to leading cybersecurity practices and prioritizes cyber threats based on comprehensive cyber analysis.</li>
<li>Examine foreign capabilities to detect, disrupt, and block USMC emissions and signals across the entire cyber kill chain, including, but not limited to, emissions from targeting, communications, and ISR (Intelligence, Surveillance, and Reconnaissance) systems, as well as reversible and non-reversible attacks.</li>
<li>Monitor and assess advancements in emerging and commercial technologies that state and non-state actors could leverage to detect, disrupt, or compromise USMC acquisition programs&rsquo; network infrastructure.</li>
<li>Identify critical risk factors within the environment, such as network classification, baseline activity, system architecture, operating systems, services, connectivity, and bandwidth.</li>
<li>Determine the boundaries of the network for potential collection activities.</li>
<li>Define the limits of connected or supporting networks that may require collection efforts.</li>
<li>Evaluate existing databases to identify intelligence gaps.</li>
<li>Utilize open-source information to collect Publicly Available Information (PAI).</li>
<li>Investigate the physical battlespace to understand how the environment could influence tactical operations.</li>
<li>Characterize the effects of the battlespace.</li>
<li>Analyze the battlespace environment in terms of information, services, and networks, focusing on confidentiality, integrity, and availability, and evaluating mechanisms to protect, detect, respond, restore, and conduct reviews.</li>
<li>Examine additional characteristics of the battlespace, such as security measures, auditing procedures, and backup systems. Assess the adversary's physical location of assets, architecture, automation capabilities, security policies, baseline activity, vulnerabilities, and conclusions related to Rules of Engagement (ROE) for Information Assurance (IA), Computer Network Defense (CND), and Computer Network Attack (CNA).</li>
<li>Identify potential Courses of Action (COA) for the adversary.</li>
<li>Determine the adversary&rsquo;s likely objectives and desired outcomes.</li>
<li>Identify all possible COAs available to the adversary, with an emphasis on the most likely and most dangerous options.</li>
<li>Develop COAs based on the adversary's perspective of friendly information architecture (reverse cyber IPB).</li>
<li>Evaluate and prioritize each adversary&rsquo;s COA.</li>
<li>Continuously refine COAs as new information becomes available over time.</li>
<li>Assess foreign Computer Network Defense (CND) and Computer Network Attack (CNA) capabilities, limitations, and vulnerabilities.</li>
<li>Evaluate potential vulnerabilities in USMC tactical systems to CNA, including systems associated with targeting, ISR, and navigation.</li>
<li>Provide portfolio-specific analysis, expertise, and intelligence production as outlined below.</li>
<li>Conduct Threat Steering Groups with participants from USMC Combat Development &amp; Integration to identify key factors and significant risk drivers for potential material solutions that may influence lifecycle cost, performance, schedule, and other acquisition decisions.</li>
<li>Produce and deliver Validated Online Lifecycle Threat Reports (VOLTs), Critical Intelligence Parameters (CIPs), and Capability Development Threat Summaries to support Marine Corps Acquisition Programs throughout the Joint Capabilities Integration and Development System (JCIDS) process, assisting the Defense Acquisition System.</li>
</ul><p><b>
Requirements</b></p><ul>
<li><b>TS/SCI Security Clearance</b></li>
<li><b>Desired Experience:</b> At least 3 years of experience conducting analysis relevant to the labor category, with at least some of the experience within the last 2 years.</li>
<li><b>Desired Education:</b> Bachelor&rsquo;s degree in a field related to the labor category from an accredited college or university recognized by the U.S. Department of Education. Alternatively, an additional 4 years of experience in the specific labor category, totaling 7 years, may substitute for a Bachelor&rsquo;s degree.</li>
<li>Demonstrates a working knowledge of the concepts involved in the specific functions outlined in the labor category description.</li>
<li>Knowledgeable of and demonstrates the ability to apply IC and DoD classification guidelines and procedures.</li>
<li>Demonstrates the ability to work semi-independently with oversight and direction.</li>
<li>Demonstrates the ability to apply logic when evaluating and synthesizing multiple sources of information. Shows understanding of interpreting analysis, including its meaning, significance, and implications. Demonstrates the ability to defend analytic judgments with sound, logical conclusions, and to adapt these judgments when new information, changing conditions, or unexpected developments arise.</li>
<li>Demonstrates the ability to produce timely, logical, and concise analytic reports, documents, assessments, studies, and briefing materials in various formats, including Microsoft Office tools (e.g., Excel, Word, PowerPoint), electronic/soft copy matrices, and/or web-enabled formats.</li>
<li>Demonstrates the ability to clearly communicate complex issues in a concise and organized manner, both verbally and non-verbally, with strong grammar skills. Demonstrates proficiency with Microsoft Office tools.</li>
<li>Demonstrates the ability to develop structured research, including but not limited to obtaining, evaluating, organizing, and maintaining information within security and data protocols.</li>
<li>Demonstrates the ability to recognize nuances and resolve contradictions and inconsistencies in information.</li>
<li>Demonstrates working knowledge of complex analytic methodologies, such as structured analytic techniques or alternative approaches, to examine biases, assumptions, and theories, reducing uncertainty, strengthening analytic arguments, and mitigating surprise. Structured analytic techniques include, but are not limited to, Analysis of Competing Hypotheses, Devil&rsquo;s Advocacy, High-Impact / Low-Impact Analysis, Red Team Analysis, and Alternative Futures Analysis.</li>
<li>Demonstrates understanding of intelligence collection capabilities and limitations, including but not limited to technical sensors/platforms and human intelligence sources relevant to the labor category.</li>
<li>Demonstrates understanding of evaluating collected intelligence reporting, engaging with collection managers, and developing collection requirements.</li>
</ul><p></p><p><i>Global Dimensions does not discriminate on the basis of race, sex, color, religion, age, national origin, marital status, disability, veteran status, genetic information, sexual orientation, gender identity or any other reason prohibited by law in provision of employment opportunities and benefits. Equal Opportunity Employer/Veterans/Disabled.</i></p></div>

Cyber Systems Analyst - Junior - TS/SCI - Quantico, VA

Google

<div>Note: Google's hybrid workplace includes remote roles.<br>
<br>
<b>Remote location: Qatar.</b><h3 class="jobSectionHeader"><b>
Minimum qualifications:</b></h3><ul>
<li>Bachelor's degree or equivalent practical experience.</li>
<li>5 years of experience in a customer-facing role in cyber security (e.g., Network Forensics Analyst, Threat Intelligence Analyst).</li>
<li>Experience engaging with, and presenting to, technical stakeholders and executive leaders.<br>
</li>
<li>Experience in the consumption, processing, and analysis of CTI within an operational environment, supporting monitoring, detection, and response capabilities.</li>
<li>Experience of cyber threat intelligence practices, standards, and frameworks (e.g., MITRE ATT&amp;CK, STIX/TAXII).</li></ul><br>
<h3 class="jobSectionHeader"><b>
Preferred qualifications:</b></h3><ul>
<li>7 years of experience evaluating forensic reports of electronic media, packet capture, log data, malware triage, or enterprise-level information security operations.<br>
</li>
<li>Experience with CTI methodologies and application within cyber security organizations.<br>
</li>
<li>Experience in the analysis of CTI, supporting monitoring, detection, and response capabilities.<br>
</li>
<li>Experience with standard network logging formats, network management systems and network security monitoring systems, and security information and event management.<br>
</li>
<li>Experience in deploying and analyzing data from technical security controls (e.g., web proxy, firewalls, IPS, IDS, enterprise antivirus solutions, network analyzers).</li>
</ul><div><h2 class="jobSectionHeader"><b>About the job</b></h2>
Mandiant is a recognized leader in cyber security expertise and has earned the trust of security professionals and company executives around the world. Our unique combination of renowned frontline experience, nation-state grade threat intelligence, machine intelligence, and the industry's best security validation ensures that Mandiant knows more about today's advanced threats than anyone.<br>
<br>
Mandiant&rsquo;s Intelligence Delivery services transform organizations from a technology-led mentality to an intelligence-driven capability. In this role you will be evaluating and maturing the organization's Cyber Threat Intelligence (CTI) capabilities. You will execute across the entire CTI lifecycle including strategic assessment, process design, tool selection, collections development, training, and managerial mentorship. You will act as an expert advisor and will be responsible for, guiding the development CTI functions across the globe and empowering cybersecurity organizations to leverage threat intelligence effectively at organizations of all shapes and sizes. This is an onsite, client-facing position. This position requires onsite client-facing work 3 days a week in Doha.<div><div>
Part of Google Cloud, Mandiant is a recognized leader in dynamic cyber defense, threat intelligence and incident response services. Mandiant's cybersecurity expertise has earned the trust of security professionals and company executives around the world. Our unique combination of renowned frontline experience responding to some of the most complex breaches, nation-state grade threat intelligence, machine intelligence, and the industry's best security validation ensures that Mandiant knows more about today's advanced threats than anyone.</div></div></div><div><h2 class="jobSectionHeader"><b>
Responsibilities</b></h2><ul>
<li>Evaluate tools and best practices for tracking advanced threats, tools, techniques, and procedures (TTPs) of attacker&rsquo;s motivations, and industry and attacker trends.<br>
</li>
<li>Perform strategic, tactical, and operational research and analysis of adversarial cyber threats.<br>
</li>
<li>Correlate intelligence to develop understandings of tracked threat activity.<br>
</li>
<li>Present tactical and strategic intelligence about threat groups, the methodologies they use, and the motivations behind their activity and convey the importance of findings to a variety of audiences.<br>
</li>
<li>Work with customers to determine their intelligence needs and requirements and prepare and deliver briefings and reports to the customers executives, security team, and fellow analysts.</li>
</ul></div>Google is proud to be an equal opportunity workplace and is an affirmative action employer. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. See also Google's EEO Policy and EEO is the Law. If you have a disability or special need that requires accommodation, please let us know by completing our Accommodations for Applicants form.</div>

Senior Security Consultant, Intelligence Services

ACCC

<p></p><b>Overview </b><p>Do you want to work at an agency where each day reveals new opportunities to work on some of the biggest issues facing consumers and businesses and have opportunities to pursue new and exciting pathways? </p><p>Do you want to work at a place where smart and dedicated people from all walks of life collaborate to work on meaningful matters? </p><p>Do you want to play a key role in administrative discipline and effectiveness of our Information Security Management System (ISMS) especially compliance with the Australian Government Information Security Manual (ISM)? </p><p><b>Then this is the place for you! </b> At the ACCC, we're proud of the impact we can make together. We understand the responsibilities and challenges that come with a fast moving and ever-changing environment. Our high performing culture is built on a foundation of care, support and inclusion. It's why we're driven by connection and collaboration, sharing our skills, knowledge and support with each other freely and frequently. It's why we prioritise the wellbeing of our people and empower them to work autonomously, flexibly and courageously. At the ACCC, we believe the best version of you is the one that's true to who you are - and that's the you we want working alongside us. </p><p>We value flexibility, and all roles can be performed from any capital city in a state or territory or Townsville and are available on a full-time, part-time or job-share basis. </p><p><b>Applicants from diverse backgrounds including First Nations peoples, people with disability and those from different cultural backgrounds are encouraged to apply. </b> </p><b>What you will do as the Senior Cyber Security Analyst </b><p><b>The Senior Cyber Security Analyst </b> will play a key role in administrative discipline and effectiveness of our Information Security Management System (ISMS) especially compliance with the Australian Government Information Security Manual (ISM). You will be responsible for security monitoring and reporting, user administration and support of security tools based on ISM standards, playing a pivotal role in the Consumer Data Right (CDR) initiative by promoting a secure, reliable, and trusted environment. </p><p><b>As An APS6 Senior Cyber Security Analyst, You Will </b> </p><ul><li>Collaboratively work with vendors, service providers, other Commonwealth cyber security teams, and external specialists to implement and operationalise security controls and improve monitoring systems. </li><li>Undertake daily operations activities including user administration of role-based access control (RBAC), extensive use of Azure security tools and dashboards, regular audits configurations to ensure compliance and appropriate assignment of privileges. </li><li>Review security incident and event logs and monitor threat intelligence feeds and contribute to ongoing threat intelligence. </li><li>Monitor, analyse, and report compliance against ISMS controls, identifying areas for improvement in data collection, assurance processes, and security procedures. </li><li>Provide timely intelligence reporting on potential security risks and ISM compliance issues. </li><li>Contribute to the development of tactical controls and contribute to strategic direction of cyber security operations. </li><li>Prepare regular reports and presentations on cyber security for management and executives. </li> </ul><b>About You </b><p>When assessing applications, we will have regard to the APS Integrated Leadership Profile (ILS) for the APS classification. Follow the link for more information on the ILS. The APS6 role in particular requires: </p><ul><li>Demonstrated ability to work in a neurodiverse security team, fostering a psychologically safety and productive work environment. Commitment to confidentiality and secure handling of sensitive information. </li><li>Demonstrated experience in dealing with enquiries and managing stakeholder relations in a composed and structured manner. </li><li>Demonstrated ability to work autonomously within a team environment and independently with minimal supervision. </li><li>Strong interpersonal skills and ability to present information clearly and concisely. </li><li>Broad knowledge of contemporary cyber security eco-system and an ability to identify solution that improve assurance processes. </li><li>Solid understanding of cyber security monitoring and reporting operations particularly against standards like the Australian Government Information Security Manual (ISM). </li><li>Applied knowledge and understanding of Australian Government Information Security Manual (ISM). </li><li>Applied knowledge and experience with key cyber security technologies and solutions including Azure tools (e.g., Sentinel and Defender), SPLUNK and Airlock. </li><li>Strong background in Azure Cloud Security environments and proficiency in Microsoft. </li><li>Experience using Azure, Microsoft 365 and DevOps tools. </li> </ul><p>To find out more about us and the role, please read the Candidate Kit. </p><b>Security clearance </b><p>This role requires a minimum of Negative Vetting 1 security clearance to be obtained and maintained, whilst in the role. </p><b>How To Apply </b><p>You will be asked to respond to the statement of claims of no more than 800 words and submit your resume with key outcomes or what you are most proud of in each role you have held (2 pages maximum). </p><p><b>Salary: </b> APS6: $99,562 to $111,590 (plus 15.4% superannuation) </p><p><b>Contact Officer: </b> Jasmine Mosenich - </p><p><b>Applications Close: </b> 11:00pm (AEDT) 02 November 2025 </p> <p></p>

Senior Cyber Security Analyst - APS6 (EA2025/218)

Peraton

<div><b>About Peraton</b><br>
Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world's leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees do the can't be done by solving the most daunting challenges facing our customers. Visit peraton.com to learn how we're keeping people around the world safe and secure.<br>
<br>
<b>Program Overview</b><br>
Provide experienced analysts that will deliver network and exploitation analysis to secure and defend vital networks, and accelerate the nation's ability to meet the challenges posed by an increasingly complex global security environment.<br>
<br>
<b>About The Role</b><br>
<br>
<b>Next Generation Digital Network Exploitation Analyst (DNEA1)</b>
<br>
<br>
<b>Location:</b> Annapolis Junction / Fort Meade, MD<br>
<br>
<b>Clearance:</b> Active TS/SCI with Polygraph Required
<br>
<br>
<b>Protect what matters most.</b><br>
Peraton's Cyber Mission business unit provides mission-critical SIGINT and Cyber expertise to the Intelligence Community. Join a team of elite professionals developing next-generation cybersecurity and intelligence solutions that safeguard our nation's most vital networks.
<br>
<br>
<b>What You'll Do</b>
<br>
<br>
As a <b>Digital Network Exploitation Analyst</b>, you'll apply advanced analytical and technical skills to identify, map, and exploit target networks. Your work will help strengthen and enable critical national security missions. Responsibilities may include:
<br>
<br>
<ul><li>Evaluate target networks using all-source intelligence to identify vulnerabilities and develop detailed exploitation and operations plans.
</li><li>Analyze SIGINT and cyber data across multiple layers of the OSI model.
</li><li>Apply deep knowledge of IP core infrastructure, communication devices, and network traffic behaviors.
</li><li>Develop and share new tradecraft as technologies evolve.
</li><li>Collaborate with government, military, and contractor partners to align intelligence needs and mission priorities.
</li><li>Synthesize and communicate insights and findings to mission stakeholders and intelligence consumers.
</li></ul><br>
<b>Qualifications</b><br>
<br>
<b>What You Bring</b>
<br>
<br>
<ul><li><b>Experience:</b>
</li><li>9 years of experience without a degree, OR
</li><li>7 years of experience with an Associate's degree, OR
</li><li>5 years of experience with a Bachelor's degree, OR
</li><li>3 years of experience with a Master's degree
</li><li>Background in one or more of the following: systems design, software/hardware engineering, cybersecurity, network security, vulnerability analysis, penetration testing, digital forensics, or network administration.
</li><li>Proven experience analyzing SIGINT and cybersecurity data and mapping target networks.
</li><li>Completion of <b>JCAC (Joint Cyber Analysis Course)</b> may be considered equivalent to a technical associates degree or it may count towards experience requirement of 6 months.
</li><li><b>Foreign language proficiency (DLPT-verified)</b> may also be considered relevant experience.
</li><li><b>Active TS/SCI with current polygraph</b> is required.
</li></ul><br>
<b>Preferred Qualifications</b>
<br>
<br>
<ul><li>Strong grasp of logical/physical IP core infrastructure and how devices interconnect across networks.
</li><li>Experience developing new analytic tradecraft to meet evolving mission challenges.
</li></ul><br>
<b>Why Join Peraton</b>
<br>
<br>
Peraton offers enhanced benefits to employees supporting this critical National Security mission:
<br>
<br>
<ul><li><b>Subsidized benefits</b> for employees and dependents
</li><li><b>25 days PTO</b> annually with a generous accrual cap
</li><li><b>Attractive bonus plan</b> tied to mission performance
</li></ul>#AJCM
<br>
<br>
#NextGenFF
<br>
<br>
<b>SCA / Union / Intern Rate or Range</b><br>
<br>
<b>Details</b><br>
<br>
Target Salary Range: $104,000 - $166,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual's experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.
<br>
<br>
<b>EEO:</b> Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.</div>

Digital Network Exploitation Analyst (DNEA2), Lead Associate

ZeroFOX Inc.

<p>ZeroFox is seeking a creative, results-driven Intelligence Analyst with strong analytical skills, regional expertise, and language capabilities. The ideal candidate excels at online investigations, connecting the dots to deliver actionable threat intelligence across cyber, physical, reputational, and compliance domains. You'll assess risks, analyze trends, and provide clear, proactive reporting to support critical client protection. This role requires critical thinking, discretion, and a passion for fast-paced, mission-driven work that strengthens long-term client trust.</p><p><strong>Role and Responsibilities:</strong></p><ul><li>Leverage your analytical skills and tradecraft;</li><li>Proactively update the Client's ZeroFox Platform, creating reporting that clearly shows the effectiveness of their solution, providing ongoing education, and being the internal ZeroFox advocate for your Clients needs;</li><li>Assist in customer care and all production aspects, covering the range of assigned duties. Support and/or lead recurring deliverables and touchpoints</li><li>Provide security alerts, short and long-form intelligence reports, and investigative summaries;</li><li>Focus on customer-specific collections metrics, key observables, and other quantifiable datasets to support value-add.</li></ul><p><strong>Intelligence-Specific Requirements</strong></p><ul><li>General experience in threat intelligence</li><li>Understanding of the threat intelligence lifecycle</li><li>Experience in writing both brief and long-form intelligence and investigative reports</li><li>Experience in orally delivering intelligence briefs or presentations in English and Iraqi Arabic</li><li>Experience in analyzing and synthesizing large amounts of data and information to turn it into actionable intelligence</li></ul><p><strong>Analyst-Specific Requirements</strong></p><ul><li>Ability to convey complex ideas, trends, and information in a simple way</li><li>Experience servicing or working face-to-face with Clients</li><li>Ability to liaise between various internal and external teams</li><li>Ability to navigate Client issues, incidents, and culture in a respectful and timely manner</li><li>Ability to assess, write, and communicate in an informed, objective, and timely manner</li><li>Ability to quickly and effectively respond to requests and meet deadlines</li><li>Proven use of discretion when making important decisions</li><li>Strong organizational skills and ability to prioritize and track multiple projects in tandem</li><li>Strong attention to detail and proven research skills</li><li>Strong data analysis skills</li><li>Ability to translate Client requirements into tactical and operational processes</li><li>Quick ability to adapt and recommend solutions as needed based on evolving situations</li><li>Ability to be highly collaborative but also work independently</li></ul><p><strong>Tooling and Technology Experience Qualifications</strong></p><ul><li>Direct Client advocacy and engagement experience in post-sales or professional services functions</li><li>Provide advice and guidance as the subject matter expert to ensure successful ongoing usage of and value from the ZeroFox platform</li><li>Ability to assist in facilitating requests for new platform configuration and changes to use cases within the Client environment. Work with the Client on an ongoing basis, attending all recommended calls and meetings</li><li>Design and develop innovative solutions to Client requirements using ZeroFox's platform</li><li>Deliver web-based training to user groups to support organizational adoption</li><li>Undertake discovery and education activities to identify opportunities for ZeroFox usage across organizational functions and processes</li><li>Assist in functioning as a frontline technical resource for "best practice" and informal Client questions</li><li>Initiate engagement with other ZeroFox resources when needed as a Client advocate to ensure speedy resolution of Client issues</li><li>Maintain current functional and technical knowledge of ZeroFox service options</li><li>Help to document best practices in developing and using ZeroFox solutions</li></ul><ul><li>Native speaker or fluency in Iraqi Arabic (must be comfortable reading, writing, speaking and briefing in this language)</li></ul><ul><li>Experience in open source and social media research, or investigations, typically obtained in 2-3 years; ability to connect the dots</li><li>Creativity in leveraging internet search techniques and methods</li><li>Ability to determine the credibility, value, significance, and relevancy of information from different data sources to produce clear, concise, and timely analytical products</li><li>Experience with some of the following: Social Media Platforms, blogs, IRC, Deep / Darkweb, and message boards</li><li>Ability to collect, authenticate, validate and document online evidence</li><li>Strong written and oral communication skills; comfortable with providing briefings and presentations</li><li>Experience producing short and long form reports, applying BLUF or similar models</li><li>Comfort working independently and in teams</li><li>Proficient in Google Suite of productivity tools</li><li>Knowledge of data analytics, dashboards, and reporting</li><li>Skill with various workflow tools: Google Suite, Monday . com, Zendesk.</li><li>Propensity to thrive on change and general dissatisfaction with the "status quo" founded on the belief that great is better than good</li></ul><p><strong>Education / Training Requirements:</strong></p><ul><li>Bachelor's or Graduate degree, preferably in Computer Science, Information Systems, Cyber, Intelligence studies or other similar background</li></ul><p><strong>Physical and Sensory Requirements:</strong></p><p>Mobility, walking, climbing, sitting, standing, reaching, bending, lifting (minimum of 10 lbs), fine eye-hand coordination, ability to read, write, listen and speak clearly, the ability to understand and follow written and oral instructions and directions, ability to travel =/ <p>EOE/AA/M/F/Veteran/Disability Employer</p><ul><li>Competitive compensation</li></ul><ul><li>Community-driven culture with employee events</li><li>Respectful and nourishing work environment, where every opinion is heard and everyone is encouraged to be an active part of the organizational culture</li></ul><p><strong>About us</strong></p><p>ZeroFox is on a mission to make the internet safer for all. Innovation is at our core - we are relentless in the pursuit of finding new ways to disrupt external cyber threats on the surface, deep, and dark web. ZeroFox offers the only unified cybersecurity platform combining advanced AI analytics, digital risk and privacy protection, full-spectrum threat intelligence, and a robust portfolio of breach, incident and takedown response capabilities to protect customers from growing threats across the external attack surface. It's a great time to join us in the Fox Den - with fresh private equity funding, expanding investments in AI, a people-first culture, and centers of excellence around the world, we're growing like never before. If you're looking for a mission-oriented, customer-focused, collaborative team and ready to take the fight to the adversary, apply to join us in the Den today.</p><p><strong>Equal Opportunity</strong></p><p>We aim to build a team that represents a variety of backgrounds, perspectives, and skills. We embrace inclusion and ensure equal employment opportunity without discrimination or harassment based on race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity or expression, age, disability, national origin, marital or domestic/civil partnership status, genetic information, citizenship status, military or veteran status, or any other personal characteristic.</p>

Intelligence Analyst

<div>
 Note: Google's hybrid workplace includes remote and in-office roles. By applying to this position you will have an opportunity to share your preferred working location from the following:
 <br/>
 <br/>
 <strong>
  In-office locations: Kuwait City, Kuwait.
  <br/>
  <br/>
 </strong>
 <strong>
  Remote location(s): Kuwait.
 </strong>
 <strong>
  Minimum qualifications:
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Bachelor's degree or equivalent practical experience.
  </li>
  <li>
   5 years of experience in an investigative role involved in the production of threat intelligence for decision-makers or customers and involved in direct customer support.
  </li>
  <li>
   Experience in an operational role involved in the research and writing of threat intelligence products for decision-makers or customers.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Preferred qualifications:
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Experience in program management or business.
  </li>
  <li>
   Experience in using tools for analysis such as intrusion operations, enterprise security controls, log analysis, network flow and traffic analysis, incident response processes, cyber attack life-cycles and models.
  </li>
  <li>
   Experience working in a government environment and with host and network forensic reports of electronic media, packet capture, log data analysis, malware triage and network.
  </li>
  <li>
   Experience with malware/security, Google products, and working in an investigative or incident response environment.
  </li>
  <li>
   Knowledge of cyber security concepts, common enterprise IT infrastructure components, operating system internals and networking.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  About The Job
  <br/>
  <br/>
 </strong>
 As a Security Consultant, you will be responsible for helping clients effectively prepare for, proactively mitigate, and detect and respond to cyber security threats. Security Consultants have an understanding of computer science, operating system functionality and networking, cloud services, corporate network environments and how to apply this knowledge to cyber security threats.
 <br/>
 <br/>
 As a Security Consultant, you could work on engagements including assisting clients in navigating technically complex and high-profile incidents, performing forensic analysis, threat hunting, and malware triage. You may also test client networks, applications and devices by emulating the latest techniques to help them defend against threats, and will be the technical advocate for information security requirements and provide an in-depth understanding of the information security domain. You will also articulate and present complex concepts to business stakeholders, executive leadership, and technical contributors and successfully lead complex engagements alongside cross functional teams.
 <br/>
 <br/>
 Mandiant Services provides incident response, assessment, transformation, managed detection and response, and training services with direct tactical support.
 <br/>
 <br/>
 In this role, you will ensure the delivery of intelligence to each customer&rsquo;s security or operational environments in order to drive decision making and selective action. You will also act as a conduit to Mandiant&rsquo;s extensive network of cyber security, threat intelligence, and information operations professionals.
 <br/>
 <br/>
 Part of Google Cloud, Mandiant is a recognized leader in dynamic cyber defense, threat intelligence and incident response services. By scaling decades of frontline experience, Mandiant helps organizations to be confident in their readiness to defend against and respond to cyber threats.
 <br/>
 <br/>
 <strong>
  Responsibilities
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Evaluate current and emerging tools, best practices, and techniques for tracking advanced continuous threats, as well as the tools, Tactics, Techniques, and Procedures (TTPs) related to attackers' motivations, industry trends, and attacker behavior.
  </li>
  <li>
   Perform tactical and operational research and analysis of adversarial cyber threats.
  </li>
  <li>
   Correlate intelligence to develop an understanding of tracked threat activity.
  </li>
  <li>
   Present tactical intelligence about threat groups, the methodologies they use, and the motivations behind their activity.
  </li>
  <li>
   Prepare and deliver briefings and reports to the client&rsquo;s executives, security team, or analysts.
   <br/>
   <br/>
   <br/>
  </li>
 </ul>
 Google is proud to be an equal opportunity workplace and is an affirmative action employer. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. See also Google's EEO Policy and EEO is the Law. If you have a disability or special need that requires accommodation, please let us know by completing our Accommodations for Applicants form .
</div>


Senior Intelligence Analyst

Search 6663+ Cyber intelligence analyst jobs near you this November. New roles added regularly across leading industries. Apply today.