cyber threat analyst

Amentum

<div></div><div><div><div><div><div>RED CELL CYBER ANALYST (Operational Position)
The Red Cell Cyber Analyst is responsible for providing direct strategic and tactical analytic cyber support to the DoW Red Cell. The Red Cell Cyber Analyst drives cyber operations by selecting cyber targets, identifying gaps in cyber architecture, and developing cyber emulative courses of action pertaining to specific vulnerability assessments. The Red Cell Cyber Analyst is responsible for providing advice to tactical partner elements and Red Cell personnel in planning adversarial cyber warfare courses of action. The Red Cell Cyber Analyst is responsible for providing advisory support concerning network and infrastructure analysis to enable adversarial cyber and/or electronic warfare operations in support of DoW Red Cell operations. The Red Cell Cyber Analyst will be expected to travel in direct support of vulnerability assessments.

The Red Cell Cyber Analyst acts as subject matter expert on a variety of complex topics related to cyber threats. Specifically, the Red Cell Cyber Analyst is responsible for researching and identifying positions, access points, relationships, organizations, and other potential vulnerabilities in support of DoW Red Cell operations. They are expected to use advanced analytic skills/ tools and maintain knowledge of industry best practices related to cyber red teaming. They report directly to the Red Cell Cyber Analysis Lead.

Responsibilities/Tasks

The Red Cell Cyber Analyst shall:
<ul>
<li>Characterize the adversary&rsquo;s cyber capabilities. Research the structure, ideology, intentions, tactics, and capabilities of adversarial cyber organizations to develop threat characterization using a combination of both classified and unclassified sources.</li>
<li>Contribute constructively to cyber threat emulation. Identify information requirements, develop assessment cyber strategies, assist building Red Cell collection plans, identify information sources, and develop and conduct research of publicly available information (PAI) in order to determine adversary cyber courses of action and relevant priority information requirements (PIRs).</li>
<li>Identify, map, and plan potential exploitation of key telecommunication networks.</li>
<li>Analyze and characterize cyber systems and conduct analysis appropriate to the program. Identify essential functions, tasks, and critical assets necessary to perform analysis as determined by the program leader.</li>
<li>Develop courses of action that a cyber adversary might employ against customer personnel, equipment, facilities, networks, information and information systems, infrastructure, and supply chains.</li>
<li>Facilitate timely information management flow from DoW Red Cell partner elements and other entities supporting DoW Red Cell operations.</li>
<li>Support field assessments from a cyber adversary perspective.</li>
<li>Synthesize findings to support vulnerability identification, course of action development, protection studies, trend analyses, risk analysis, and mitigation strategies.</li>
<li>Develop a comprehensive understanding of the implications of cyber vulnerabilities discovered and fuse those findings with the systems analysis to determine impacts to the national and military missions they support.</li>
<li>Prepare activity reports including out briefs, senior leader briefs, interim progress reports (IPRs), white papers, after action reviews, final reports, risk analysis products, and other documents necessary to convey assessment findings to customers, partners, and other stakeholders.</li>
<li>Be able to explain network/system mechanisms to non-cyber personnel in order to facilitate better analysis and operations.</li>
<li>Should have a diverse understanding of network and information security operations, network exploitation, and telecommunications.</li>
</ul>
Required Skills/Qualifications

<ul><li>Four-year BS/BA degree with two years applicable experience as a cyber analyst; or associate&rsquo;s degree with four years applicable experience as a cyber analyst; or eight years of applicable experience as a cyber analyst.</li>
<li>Proficient in understanding, analyzing and summarizing comprehensive and complex technical, contractual, and research information/data.</li>
<li>Ability to write about complex topics in a way that will effectively capture and transmit the message to non-cyber personnel.</li>
<li>Ability to communicate complex informational concepts or ideas in a confident and well-organized manner through verbal, written, and visual means.</li>
<li>Ability to accurately and completely source all data used in products.</li>
<li>Ability to develop or recommend analytic approaches to problems for which information is incomplete or for which no precedent exists.</li>
<li>Ability to think like and emulate actions of threat actors.</li>
<li>Possess a current driver's license.</li>
<li>Capable of operating a rental vehicle.</li>
<li>Active TS/SCI clearance required.</li>
<li>U S citizenship required.</li>
<li>Travel is up to 20%</li>
</ul>
Desired Skills/Qualifications

<ul><li>Understand and be well versed in common cyber threat terminology, vulnerability and penetration test principles and methodologies; possess basic knowledge of cyber incident and response forensics and related current events.</li>
<li>Familiarity with Log Analysis, Packet Analysis OSI Model, Network Architectures, NIST, DIA-CAP, RMF, and Information Operations, threat intelligence activities including the collection of and tracking threat actors, digital forensics incident response; and threat hunting methodologies.</li>
<li>Experience performing attack analysis or Red Cell penetration testing against operational computer networks including experience in Windows Security, Network Security, Linux/Unix Security, Database security, or Mainframe Security.</li>
<li>Knowledge of common computer/network infections (virus, trojan, etc.) and methods of infection (ports, attachments, etc.).</li>
<li>Knowledge of computer networking fundamentals (i.e., basic computer components of a network, types of networks, etc.)</li></ul> 

</div></div></div></div>
Compensation Details:
105,000 
The compensation range or hourly rate listed for this position is provided as a good-faith estimate of what the company intends to offer for this role at the time this posting was issued. Actual compensation may vary based on factors such as job responsibilities, education, experience, skills, internal equity, market data, applicable collective bargaining agreements, and relevant laws. 
Benefits Overview:
Our health and welfare benefits are designed to support you and your priorities. Offerings include:<ul>
<li>
Health, dental, and vision insurance</li>
<li>
Paid time off and holidays</li>
<li>
Retirement benefits (including 401(k) matching)</li>
<li>
Educational reimbursement</li>
<li>
Parental leave</li>
<li>
Employee stock purchase plan</li>
<li>
Tax-saving options</li>
<li>
Disability and life insurance</li>
<li>
Pet insurance</li></ul> 
Note: Benefits may vary based on employment type, location, and applicable agreements. Positions governed by a Collective Bargaining Agreement (CBA), the McNamara-O'Hara Service Contract Act (SCA), or other employment contracts may include different provisions/benefits. 
Original Posting:
02/23/2026 - Until Filled
Amentum anticipates this job requisition will remain open for at least three days, with a closing date no earlier than three days after the original posting. This timeline may change based on business needs. 
Amentum is proud to be an Equal Opportunity Employer. Our hiring practices provide equal opportunity for employment without regard to race, sex, sexual orientation, pregnancy (including pregnancy, childbirth, breastfeeding, or medical conditions related to pregnancy, childbirth, or breastfeeding), age, ancestry, United States military or veteran status, color, religion, creed, marital or domestic partner status, medical condition, genetic information, national origin, citizenship status, low-income status, or mental or physical disability so long as the essential functions of the job can be performed with or without reasonable accommodation, or any other protected category under federal, state, or local law. Learn more about your rights under Federal laws and supplemental language at Labor Laws Posters.</div>

Red Cell Cyber Analyst

help AG

<div>Help AG is looking for a Senior Threat Intelligence Specialist who will be responsible for the day to day operations of our cyber threat intelligence and digital risk protection team. The Specialist will ensure delivery of all CTI and DRP services as per our contractual obligation to our customers. The Specialist will also bring new ideas for service enhancements and new service developments. This role is vital to the success of Help AG&rsquo;s MSS services and to providing exceptional CTI and DRP services to our customers. 
Responsibilities:<ul><li>
Conduct strategic cyber‑threat analysis by monitoring global threat actors, TTPs, and emerging technologies to assess risks and produce intelligence-driven recommendations for senior leadership.</li><li>
Evaluate geopolitical trends and regional developments to identify potential impacts on organizational security, operational resilience, and long‑term strategic planning.</li><li>
Develop intelligence reports, threat forecasts, and executive briefings that synthesize cyber, geopolitical, and economic indicators into clear, actionable insights for decision‑makers.</li><li>
Collaborate with internal security, risk, and incident response teams to contextualize threats, support risk assessments, and inform proactive defensive strategies.</li><li>
Lead strategic horizon scanning and scenario planning exercises to anticipate shifts in the global threat landscape, enabling the organization to prepare for emerging cyber and geopolitical risks.</li><li>
Ensure quality service delivery of all CTI and DRP services.</li><li>
Conduct phishing attack investigations and provide TTP-based attribution reports</li><li>
Monitor social media, forums, and the dark web for indicators of targeted threats or brand impersonation</li><li>
Collaborate with internal security and fraud teams to recommend threat mitigation strategies</li><li>
Utilize Digital Risk Protection (DRP) platforms to detect external threats such as impersonation, domain spoofing, and data leakage</li><li>
Produce threat reports with actionable intelligence, including IoCs and strategic recommendations</li><li>
Stay up-to-date with evolving threat actor groups, phishing kits, and darknet marketplaces</li><li>
Create Threat advisories.</li><li>
Manage Threat Intelligence Platform (MISP) and service.</li><li>
Manage Digital Risk Protection Service.</li><li>
Manage takedown service.</li><li>
Create SOPs for existing and new services.</li><li>
Enhance existing services.</li><li>
Propose and create new services.</li><li>
Create and manage service reports.</li><li>
Participate in client meetings.</li><li>
Manage service escalations.</li><li>
Problem management of CTI and DRP services</li></ul>
Qualifications &amp; Skills:<ul><li>
Qualifications: Bachelor / Master's Degree in Computer Science, Cybersecurity, Information Systems, or a closely related degree;</li><li>
An active, demonstrable interest in Cyber Security, Cyber Threat Detection, and Cyber Threat Intelligence</li><li>
Hands-on experience in anti-phishing and impersonation attack analysis</li><li>
Strong OSINT/SOCMINT skills (e.g., using Maltego, SpiderFoot, ShadowDragon, etc.)</li><li>
Familiarity with dark web forums, marketplaces, and Tor-based threat research</li><li>
Understanding of digital risk protection technologies (e.g., ZeroFox, Constella, Digital Shadows, etc.)</li><li>
Working knowledge of cyber threat intelligence frameworks (e.g., MITRE ATT&amp;CK, Diamond Model)</li><li>
Solid analytical writing and geopolitical awareness</li><li>
Demonstrable experience analyzing and interpreting threat intelligence indicators, TTPs, and threat actors</li><li>
A solid understanding of IT systems and network security concepts</li><li>
Sound knowledge of IT security best practices, common attack types, and detection/prevention methods.</li><li>
Demonstrable experience in analyzing and interpreting system, security, and application logs</li><li>
Knowledge of the type of events that both Firewalls, IDS/IPS, and other security-related devices produce</li><li>
Experience in using SIEM tools such as Splunk, ArcSight, LogRythm, Qradar, NitroSecurity, etc.</li><li>
TCP/IP knowledge, networking, and security product experience</li><li>
Possible attack activities, such as scans, man-in-the-middle, sniffing, DoS, DDoS, etc., and possible abnormal activities, such as worms, Trojans, viruses, etc.</li><li>
CCNA, CISSP, GCIA, GCIH, and CEH certifications would be preferable.</li><li>
Outstanding Organizational Skills.</li><li>
Exclusive focus and vast experience in IT.</li><li>
Strong analytical and problem-solving skills.</li><li>
Ability to interface with, and influence, Pre-Sales and Sales teams, to achieve agreed business outcomes.</li><li>
Flexible work approach, based on the job requirements.</li></ul>
Benefits:<ul><li>
Health insurance with one of the leading global providers for medical insurance.</li><li>
Career progression and growth through challenging projects and work.</li><li>
Employee engagement and wellness campaigns activities throughout the year.</li><li>
Excellent learning and development opportunities.</li><li>
Annual flights tickets.</li><li>
Inclusive and diverse working environment.</li><li>
Flexible/Hybrid working environment.</li><li>
Open door policy.</li></ul>
About Us:
Help AG is the cybersecurity arm of e&amp; enterprise (formerly Etisalat Digital) and provides leading enterprise businesses across the Middle East with strategic consultancy combined with tailored information security solutions and services that address their diverse requirements, enabling them to evolve securely with a competitive edge.Present in the Middle East since 2004, Help AG was strategically acquired by e&amp; (formerly Etisalat Group) in 2020, hence creating a cybersecurity and digital transformation powerhouse in the region. 
 
Help AG has firmly established itself as the region's trusted IT security advisor by remaining vendor-agnostic, trustworthy, independent, and maintaining its focus on all aspects of cybersecurity. With best of breed technologies from industry-leading vendor partners, expertly qualified service delivery teams and a state-of-the-art consulting practice, Help AG delivers unmatched value to its customers by strengthening their cyber defenses and safeguarding their business.</div>

Senior Threat Intelligence Specialist

CAI (Computer Aid, Inc.)

Req number: R7214
 
Employment type: Part time
 
Worksite flexibility: Onsite Who we are
 CAI is a global services firm with over 9,000 associates worldwide and a yearly revenue of $1.3 billion+. We have over 40 years of excellence in uniting talent and technology to power the possible for our clients, colleagues, and communities. As a privately held company, we have the freedom and focus to do what is right—whatever it takes. Our tailor-made solutions create lasting results across the public and commercial sectors, and we are trailblazers in bringing neurodiversity to the enterprise.
 
Job Summary As a Security Operations Center (SOC) Analyst, you will monitor our client’s environment for cyberthreats. This position is a weekend shift, Friday – Sunday morning and holidays 10pm – 6am.
 
Job Description
 
We are in need of a Part Time Security Operations Center (SOC) Analyst. This is an onsite position in La Verne, CA.
 
CAI is willing to support individuals in this role in attaining one security certification during the time of employment. Details to be provided.
 
You will work with seasoned Cybersecurity professionals with extensive experience. Many have spoken at conferences such as BlackHat, DEFCON, RSAC and BSides. This is a great opportunity to start your Cyber career and learn from the best.
 
Due to the specific legal and contractual requirements associated with this position, only U.S. citizens will be considered for this role .
 
This position is a weekend 3rd shift, Friday – Sunday morning and holidays, 10:00pm - 6:00am
 
What You’ll Do
 
Provide direct support to client’s team and efforts
 
Monitor for cyberthreats
 
Conducting cyber-threat hunting
 
Support cyber incident response activities
 
On-site analysts may be assigned to the cyber incident response team as the situation may dictate
 
What You’ll Need
 
Required: 
0-1 year of general experience or coursework related to cybersecurity, IT security, or network monitoring
 
Familiarity with security tools, alerting systems, or log analysis
 
Basic understanding of TCP/IP networking
 
Understanding of Windows Core Processes
 
Understanding of Authentication, Authorization, Accounting Processes and Methods
 
Ability to follow structured processes, document findings, and escalate issues
 
Excellent communication skills- written and verbal
 
Able to work independently, requiring minimal supervision to accomplish work
 
Excellent organizational skills
 
Able to multitask effectively and balance multiple projects at once
 
Preferred: 
Cybersecurity certifications such as, ISC(2) CC, ISC(2) SSCP, CompTIA Security +, CompTIA Cybersecurity Analyst +
 
Physical Demands
 
Ability to safely and successfully perform the essential job functions consistent with the ADA and other federal, state and local standards
 
Sedentary work that involves sitting or remaining stationary most of the time with occasional need to move around the office to attend meetings, etc.
 
Ability to conduct repetitive tasks on a computer, utilizing a mouse, keyboard and monitor
 
#LI-JH1
 
Reasonable accommodation statement
 If you require a reasonable accommodation in completing this application, interviewing, completing any pre-employment testing, or otherwise participating in the employment selection process, please direct your inquiries to application.accommodations@cai.io or (888) 824 – 8111.
 
$30.00 - $34.00 per hour
 The pay range for this position is listed above. Exact compensation may vary based on several factors, including location, experience, and education. Benefit packages for this role will include 401k retirement account access. Employees in this role may also be entitled to paid sick leave and/or other paid time off as provided by applicable law.

Security Operations Analyst (10pm-6am Fri-Sun)

MAERSK

<div>Data Scientist &ndash; Cyber Threat Intelligence
Joining Maersk will embark you on a great journey with career development in a global organisation.
You will be exposed to a wide and challenging range of business issues through regular engagement with key stakeholders across all management levels within Maersk. You will work and communicate across geographical and cultural borders that will enable you to build a strong professional network. We believe people thrive when they are in charge of their career paths and professional growth. We will provide you with opportunities to broaden your knowledge and strengthen your technical and professional foundation.
By choosing Maersk, you join not only for the role, but for a career. From here your path may take you towards extended responsibilities within A.P. Moller &ndash; Maersk.
We aim to be a world-class professional IT organisation that delivers business value through automation, standardisation and innovation. We believe in empowerment where each of us takes ownership and responsibility for developing and implementing new ways of working.
At Maersk we value the diversity of our talent and will always strive to recruit the best person for the job &ndash; we value diversity in all its forms, including but not limited to: gender, age, nationality, race, sexual orientation, disability or religious beliefs. We are proud of our diversity and see it as a genuine source of strength for building high performing teams.
Role Purpose:
As a Data Scientist in the Cyber Operations department, your primary role will be to turn data into actionable insights, leveraging tools, statistical models, AI and Machine Learning to enable data-driven decision-making. As part of this, you will also contribute to the design and delivery of data engineering and integrations capabilities that enable Cyber Operations to automate workflows and generate intelligence from security data at scale.
You will report to the Head of Cyber Threat Intelligence (CTI), working alongside other CTI Analysts and Data Scientists, as a Subject Matter Expert (SME), working closely with other Cyber Security teams. You will be accountable for the effective collection, processing and analysis of large datasets to generate informative and actionable insights.
This is a unique opportunity to provide input into the future direction and operation of the CTI function within Maersk, including the Cyber Operations department&rsquo;s AI strategy.
Key Responsibilities:
<ul><li>Accountable for the effective collection, processing and analysis of large datasets to generate informative and actionable insights.
</li><li>Identify patterns, trends, and anomalies in security tooling, leveraging AI and data science techniques to inform decision‑making.
</li><li>Host, manage and interrogate databases to deliver automated and ad hoc reporting requests on security data.
</li><li>Develop and refine causal inference, predictive, statistical and machine learning models to enable threat detection and intelligence generation.
</li><li>Produce daily visual management dashboards using real‑time data, enabling cross‑team collaboration and swift identification of issues and focus areas.
</li><li>Facilitate performance tracking of People, Processes and Technologies against KPIs to drive continuous improvement and operational reporting.
</li><li>Disseminate curated data via secure APIs and MCP servers, and present work products in the stakeholder&rsquo;s desired format, ensuring access is controlled by least privilege.
</li><li>Scope and respond to Requests for Information (RFIs) from stakeholders by providing timely data and analysis outputs.
</li><li>Responsible for developing, maintaining and enhancing the use of LLMs for Cyber Security use cases.
</li><li>Enhance threat intelligence capabilities by developing processes where automation and AI‑assisted analysis can improve efficiency.
</li><li>Accelerate automation and enable safe AI/GenAI adoption via secure data access and tool integrations that support agile workflows.
</li><li>Build and maintain data ingestion pipelines and connectors for internal and external cyber data sources (API-first, using MCP where available).
</li><li>Normalise, enrich and curate cyber security datasets, maintaining provenance (source, timestamp, confidence/quality indicators where available) to support trusted decision‑making.
</li><li>Implement engineering quality practices for pipelines and services, and document/maintain processes.
</li></ul>Relevant Services: Cyber Threat Intelligence
<ul><li>Senior Cyber Leadership Team
</li><li>Head of Security Operations Centre
</li><li>Team of SOC Analysts
</li><li>Threat Hunting
</li><li>Red Team
</li><li>Cyber Defence Engineering
</li><li>Identity &amp; Access Management
</li><li>Strategy Owners
</li><li>Cyber Risk Team
</li><li>Cyber Security Officers
</li><li>Wider Maersk Organisation
</li></ul>Primary Stakeholders: External Cyber Threat Intelligence source providers
Required Skills &amp; Experience:
Professional qualifications:
<ul><li>Bachelor&rsquo;s degree in computer science, Engineering, Mathematics, Statistics, Data Science, or a related discipline (or an equivalent qualification).
</li><li>Certification or formal training in analytics engineering or data modelling (e.g. dimensional modelling, metrics design, data quality).
</li><li>Cloud certification or training in AWS or equivalent platforms, such as AWS Certified Data Engineer &ndash; Associate and/or AWS Certified Developer &ndash; Associate (or equivalent).
</li><li>Certification or formal training in Applied AI or Generative AI fundamentals.
</li><li>Cyber security or threat intelligence training is beneficial but not essential.
</li><li>Security certifications such as CEH, OSCP, SANS, or equivalent are desirable but not essential.
</li></ul>Technical skills &amp; knowledge:
<ul><li>Proficient in writing complex SQL queries for repeatable operational analytics and reporting.
</li><li>Proficient in applied Data Science / Machine Learning using Python, TypeScript/Node.js, or similar languages.
</li><li>Solid understanding of Forecasting process and algorithms and causality.
</li><li>Proficient in data visualization tools and techniques to effectively deliver complex findings.
</li><li>Solid cloud fundamentals, preferably with AWS (e.g., S3, Lambda, Glue, Step Functions, API Gateway, CloudWatch, or equivalent services).
</li><li>Strong data engineering and analytics fundamentals, including building reliable ETL/ELT pipelines, orchestration, data modelling, and implementing data quality controls.
</li><li>Familiarity with Model Context Protocol (MCP) or similar integration frameworks is desirable.
</li><li>Basic understanding of the intelligence lifecycle is beneficial but not essential.
</li><li>Awareness of the cyber threat landscape, including common adversary tactics, techniques, and procedures (TTPs) is desirable but not essential.
</li><li>Knowledge of standard methods / systems for analysis and prioritisation of vulnerabilities e.g. CVE, CVSS, is desirable but not essential.
</li><li>Understanding of political, operational, and security risks in the maritime, transport, and logistics sectors is preferable.
</li></ul>Professional qualifications:
<ul><li>Bachelor&rsquo;s degree in Computer Science, Engineering, Mathematics, Statistics, Data Science, or a related discipline (or an equivalent qualification).
</li><li>Certification or formal training in analytics engineering or data modelling (e.g. dimensional modelling, metrics design, data quality).
</li><li>Cloud certification or training in AWS or equivalent platforms, such as AWS Certified Data Engineer &ndash; Associate and/or AWS Certified Developer &ndash; Associate (or equivalent).
</li><li>Certification or formal training in Applied AI or Generative AI fundamentals.
</li><li>Cyber security or threat intelligence training is beneficial but not essential.
</li><li>Security certifications such as CEH, OSCP, SANS, or equivalent are desirable but not essential.
</li></ul>Technical skills &amp; knowledge:
<ul><li>Proficient in writing complex SQL queries for repeatable operational analytics and reporting.
</li><li>Proficient in applied Data Science / Machine Learning using Python, TypeScript/Node.js, or similar languages.
</li><li>Solid understanding of Forecasting process and algorithms and causality.
</li><li>Proficient in data visualization tools and techniques to effectively deliver complex findings.
</li><li>Solid cloud fundamentals, preferably with AWS (e.g., S3, Lambda, Glue, Step Functions, API Gateway, CloudWatch, or equivalent services).
</li><li>Strong data engineering and analytics fundamentals, including building reliable ETL/ELT pipelines, orchestration, data modelling, and implementing data quality controls.
</li><li>Familiarity with Model Context Protocol (MCP) or similar integration frameworks is desirable.
</li><li>Basic understanding of the intelligence lifecycle is beneficial but not essential.
</li><li>Awareness of the cyber threat landscape, including common adversary tactics, techniques, and procedures (TTPs) is desirable but not essential.
</li><li>Knowledge of standard methods / systems for analysis and prioritisation of vulnerabilities e.g. CVE, CVSS, is desirable but not essential.
</li><li>Understanding of political, operational, and security risks in the maritime, transport, and logistics sectors is preferable.
</li></ul>Professional skills:
<ul><li>Excellent written and verbal communication skills (English) and able to be understood by both technical and non-technical personnel.
</li><li>A motivated and self-starting individual with ability to self-task.
</li><li>Strong interpersonal skills including, teamwork/collaboration and relationship building.
</li><li>Excellent time-management and workload prioritisation skills.
</li><li>Positive, can-do attitude, engaging, ability to accommodate agile methodologies and ability to work well under pressure.
</li><li>Can accommodate requirements that may from time-to-time, fall beyond CTI, into other Cyber Security disciplines.
</li></ul>Experience :
<ul><li>5+ years previous experience operating in a data analytics, science or engineering role, ideally within cyber security or similar.
</li><li>At least two years of experience with visualisation tools such as Power BI, MS Fabric, or Amazon QuickSight.
</li><li>Experience handling sensitive data and applying governance practices&mdash;access control, secrets management, encryption, and audit‑ready logging.
</li><li>Experience with API engineering and automation in a security operations context is desirable but not essential.
</li><li>Experience working with CTI teams, threat intelligence data, or TIP/SIEM integrations is desirable.
 </li></ul>Key Measures:
<ul><li>Timely dissemination of regular and ad-hoc products across the organisation.
</li><li>Application and review of existing processes (improvements through automation, data quality, and repeatable workflows).
</li><li>Delivery of reliable Cyber Security data feeds and curated outputs to internal consumers via APIs/MCP.
</li><li>Reliability of data pipelines and interfaces (e.g., freshness/latency, error rates, successful runs, and recovery time).
</li></ul>Maersk is committed to a diverse and inclusive workplace, and we embrace different styles of thinking. Maersk is an equal opportunities employer and welcomes applicants without regard to race, colour, gender, sex, age, religion, creed, national origin, ancestry, citizenship, marital status, sexual orientation, physical or mental disability, medical condition, pregnancy or parental leave, veteran status, gender identity, genetic information, or any other characteristic protected by applicable law. We will consider qualified applicants with criminal histories in a manner consistent with all legal requirements. 
We are happy to support your need for any adjustments during the application and hiring process. If you need special assistance or an accommodation to use our website, apply for a position, or to perform a job, please contact us by emailing accommodationrequests@maersk.com .</div>

Data Scientist – Cyber Threat Intelligence

Marine Federal Credit Union

<div>About the Role:
As a Cybersecurity Analyst, you will play a critical role in protecting the organization's information systems and data from cyber threats and vulnerabilities. Your primary objective will be to monitor, detect, and respond to security incidents, ensuring the confidentiality, integrity, and availability of digital assets. You will analyze security alerts, conduct risk assessments, and implement security measures to prevent unauthorized access or data breaches. Collaborating with IT teams and stakeholders, you will develop and enforce security policies and procedures aligned with industry best practices and regulatory requirements. Ultimately, your work will help maintain a secure computing environment that supports the organization's operational goals and safeguards its reputation.
Minimum Qualifications:<ul><li>
Bachelor's degree, or achievement of formal certifications recognized in the industry as equivalent to a bachelor's degree (e.g., information technology certifications in lieu of a degree).</li><li>
3-5 years of proven experience in cybersecurity or information security roles.</li><li>
Strong understanding of network protocols, firewalls, intrusion detection/prevention systems, and endpoint security.</li><li>
Familiarity with security frameworks such as NIST, ISO 27001, or CIS Controls.</li><li>
Experience with security monitoring tools and incident response processes.</li></ul>
Preferred Qualifications:<ul><li>
Professional certifications such as CISSP, CISM, CEH, or CompTIA Security+.</li><li>
Experience with cloud security platforms and technologies (e.g., AWS, Azure).</li><li>
Knowledge of scripting or programming languages such as Python, PowerShell, or Bash.</li><li>
Experience conducting penetration testing or ethical hacking.</li><li>
Familiarity with regulatory compliance requirements such as GDPR, HIPAA, or PCI-DSS.</li></ul>
Responsibilities:<ul><li>
Monitor network traffic and security alerts to identify potential threats or breaches.</li><li>
Conduct thorough investigations of security incidents and coordinate response efforts.</li><li>
Perform vulnerability assessments and recommend remediation strategies.</li><li>
Develop, implement, and maintain security policies, standards, and procedures.</li><li>
Collaborate with cross-functional teams to ensure security controls are integrated into IT projects and operations.</li><li>
Maintain up-to-date knowledge of emerging cybersecurity threats, trends, and technologies.</li><li>
Prepare detailed reports on security incidents, risk assessments, and compliance status.</li><li>
Assist in conducting security awareness training for employees.</li></ul>
Skills:
The required skills enable the Cybersecurity Analyst to effectively monitor and analyze security events, identify vulnerabilities, and respond to incidents promptly. Strong technical knowledge of network and endpoint security tools is essential for daily threat detection and mitigation activities. Preferred skills such as cloud security expertise and scripting enhance the ability to automate tasks and secure modern infrastructure environments. Communication and collaboration skills are vital for working with IT teams and educating employees on security best practices. Continuous learning and adaptability allow the analyst to stay ahead of evolving cyber threats and implement proactive defense strategies.
This position will require onsite work at our Corporate Headquarters located at 4180 Western Blvd., Jacksonville, NC 28546.
This is a Full-Time opportunity and will offer access to benefits after satisfactory completion of a 90-day probationary period.</div>

Cybersecurity Analyst (Full Time)

Pine Point Group

<div>Location: MD

Experience: 8 years

Clearance Level: TS/SCI clearance with a CI polygraph (or Full Scope) 


Overview:
Serve as an all-source intelligence analyst on a computer network operations (CNO) intelligence team, focused on the threat to networked weapons platforms and U.S. and DoD information networks. Conduct research and evaluate technical and all-source intelligence with specific emphasis on network operations and cyber warfare tactics, techniques, and procedures. Analyze network events to determine the impact on current operations and conduct all-source research to determine adversary capability and intent. Produce high-quality papers, presentations, recommendations, and findings for senior U.S. government intelligence and network operations officials. Develop and refine the daily operations of a growing DoD customer.
<ul>
<li>A Cyber Analysis Support Specialist (CASS) should be able to perform intelligence analysis of cyber related targets and technologies. These analysts must have the ability to select pertinent data from a variety of sources to include SIGINT, HUMINT, IMINT, etc.</li>
<li>This position requires experience in in-depth reporting styles, specifically assessment writing (not KLs, STRUMs, TACREPs, etc.)</li>
<li>A CASS must have in-depth knowledge of digital networks and telecommunications methods.</li></ul> 


Responsibilities: Sample Duties
<ul>
<li>Performing tasks associated with the SIGINT and/or other intelligence disciplines&rsquo; production cycle, including researching, tasking, analysis, reporting, assessing, and interacting with customers.</li>
<li>Analyzing and assessing technical and operational vulnerabilities in U.S./DOD or foreign current or emerging technologies or operations, and determining risk to U.S. networks of interest posed by adversarial systems, activities or operations.</li>
<li>Analyzing all-source intelligence data, identifying critical threat information, researching historical threat reporting, and crafting assessments in support of customer information needs.</li>
<li>Performing all-source research to identify and report on the intentions and capabilities of adversaries, state and non-state sponsored, to threaten, exploit or otherwise disrupt networks of interest to the U.S. and its allies.</li>
<li>Assisting with the development of databases and other knowledge repositories on adversary information warfare and hacker capabilities, intentions and supporting infrastructures.</li>
<li>Compiling and correlating data sets to determine levels of threats and vulnerabilities to U.S. network systems.</li>
<li>Producing threat/vulnerability assessments.</li>
<li>Performing risk and opportunity assessments through synthesis of information across intelligence disciplines and open-source information.</li>
<li>Supporting NTOC efforts to partner with other organizations on the identification of vulnerabilities and corresponding threats with the goal of influencing mitigation strategies and solutions.</li>
<li>Researching and analyzing data using available and appropriate analytic tools.</li>
<li>Assisting technical personnel in developing automated analytic tools by providing specific information about adversary targets and techniques.</li>
<li>Developing end-product report drafts and entering them into report production systems.</li>
<li>Assisting in the evaluation and staffing of Information Needs (IN); interacting with customers, other production elements and data acquisition offices in order to meet customer needs.</li>
<li>Scheduling meetings, analytic exchanges, organizing data and providing threat analysis support to branch and division-level managers.</li>
<li>Participating in team building research efforts, sharing analytical techniques and research methodologies.</li>
<li>Contributing to knowledge management by entering sources and analytic findings into appropriate databases and other repositories on a timely basis.</li>
<li>Documenting reports and customer feedback in local Request for Information (RFI) tracking databases and other recording systems.</li>
<li>Identifying adversary presence in the Internet and using visualization tools to map the information systems, networks and major servers they use.</li>
<li>Using research and analytic findings to identify network associations and map them in diagram/topology presentations.</li>
<li>Performing baseline and secondary analysis and providing visualization support by using Analyst Notebook and NetViz or other visualization tools.</li>
<li>Making recommendations for additional collection possibilities when and where possible.</li>
<li>Conducting and tracking behavior analysis and characterization of adversary decision processes, their technological dependencies and social network connections.</li>
<li>Documenting all research and analysis using standard document and network mapping tools.</li></ul> 


Qualifications:
<ul><li>Shall have a minimum of eight (8) continuous years of work experience in intelligence analysis or a related field, or a combination of a minimum of five (5) continuous years of work experience in intelligence analysis or a related field and a Bachelors degree in an applicable (math, science, computers, engineering) field. Work experience shall include five (5) years of IC or related experience in intelligence analysis.</li>
<li>Shall have demonstrated expertise all forms of analysis reporting and experienced with creating each product type, and thus be able to organize training for other team members on analysis, tools, or reporting.</li>
<li>Shall have demonstrated expertise with relevant CNO and SIGINT tools and databases used for the customer mission, and communications skills that include the ability to provide formal documentation of analysis and/or research results. Shall be considered a Subject Matter Expert in one or more fields appropriate to Intelligence Analysis or Computer Networking technologies, and be able to serve as a Subject Matter Expert for working groups and meetings with partner organizations I agencies.</li>
<li>Shall have demonstrated expertise in analyzing intelligence information and technical data, analyzing exploitation opportunities, documenting information and processes, gathering intelligence information, interpreting analytical results. Performing Internet research, writing and editing skills at a technical/professional level, and managing internal and external customer relations. Shall be an effective writer and verbal communicator.</li></ul> 


Required Tools: ANCHORY/MAUI, MARINA/YACHTSHOP, PATHFINDER, PINWALE/UIS, XKEYSCORE 


Preferred Tools: BANYAN, CADENCE, CROSSBONES, FASCIA, MAINWAY, TUNINGFORK, TRICKLER, UTT 


Equal Employment Opportunity Employer; all qualified applicants are encouraged to apply and will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, or veteran status.</div>

Cyber Analysis Support Specialist (Senior)

NTT DATA

<div>Make an impact with NTT DATA 
Join a company that is pushing the boundaries of what is possible. We are renowned for our technical excellence and leading innovations, and for making a difference to our clients and society. Our workplace embraces diversity and inclusion &ndash; it&rsquo;s a place where you can grow, belong and thrive.<div>
Your day at NTT DATA 
A Security Threat Intelligence and Hunting Analyst is a seasoned subject matter expert, responsible for analyzing and detecting cyber threats and malware impacting the company. 
 
The main responsibility of this role is to investigate the level of threat posed by an attack and consequently enable the organization to take informed cybersecurity-based business decisions. 
 
This role plays a key role in gathering, analyzing and synthesizing information about current and potential threats to inform the organization&rsquo;s security strategy.</div><div> 
Key responsibilities:<ul><li>
Reads reports, makes risk assessments, works to detect the source of attacks and tests current defenses against threats.</li><li>
Advises on analysis enabling organization to make decisions on how to improve security measures and respond to attacks.</li><li>
Monitors security alerts and maintains awareness of new threats and vulnerabilities in order to identify potential risks.</li><li>
Analyses data from various sources, including network traffic, email logs, malware files, web server logs, DNS records, etc. to identify cybersecurity risks.</li><li>
Develops and maintains threat intelligence databases containing information about cybercrime tactics, techniques, and procedures (TTPs) used by hackers or other actors targeting the organization&rsquo;s assets.</li><li>
Participates in Incident Response activities as necessary to identify and contain new threats.</li><li>
Conducts investigations into potential threats by collecting data from multiple sources and analyzing it to identify patterns or other significant pieces of information that indicate a specific threat may be occurring or has occurred previously.</li><li>
Communicates with senior leaders and also executives and other stakeholders on security matters to raise awareness of potential risks and recommend solutions.</li><li>
Conducts regular audits of security measures to identify vulnerabilities that could be exploited by unauthorized users.</li><li>
Reviews security policies to ensure compliance with industry regulations and best practices.</li><li>
Creates reports about potential threats for internal use by management or external use by customers or other stakeholders.</li><li>
Performs any other related task as required.</li></ul></div><div> 
To thrive in this role, you need to have:<ul><li>
Ability to apply critical thinking skills to a situation and make a decision based on the information to hand.</li><li>
Good understanding of computer systems, software and technology in general.</li><li>
Excellent written and verbal communication.</li><li>
Ability to research topics and find information relevant to their work.</li><li>
Ability to interpret large amounts of data and identify important details to identify potential threats and vulnerabilities.</li><li>
Seasoned proficiency in threat hunting methodologies, including familiarity with tools and techniques for proactive detection of threats.</li><li>
Seasoned knowledge of data analysis, log analysis, and behavioral analytics to identify anomalous activities and indicators of compromise (IOCs).</li><li>
Ability to contribute to investigations, perform post-incident analysis, and identify threat actor tactics, techniques, and procedures (TTPs)</li><li>
Seasoned proficiency in threat intelligence analysis, including the ability to collect, correlate, and interpret large volumes of data from multiple sources.</li><li>
Strong analytical and critical thinking skills are required to identify patterns, trends, and potential risks</li><li>
Seasoned knowledge of cybersecurity principles, attack vectors, and defensive strategies is essential.</li><li>
Seasoned familiarity with various security technologies, threat intelligence platforms, and data analysis tools is also necessary.</li></ul></div><div> 
Academic qualifications and certifications:<ul><li>
Bachelor&rsquo;s degree or equivalent in computer science, information technology or security or related field.</li><li>
Relevant security certification(s) such as GIAC Certified Forensic Analyst (GCFA), GIAC Certified Forensic Examiner (GCFE), and GIAC Certified Forensic Analyst (GCFACTIA, CompTIA Cybersecurity Analyst (CySA+), GCTI, FOR508 preferred.</li></ul></div><div> 
Required experience:<ul><li>
Seasoned demonstrated experience in a similar role.</li><li>
Seasoned demonstrated experience gained within a global technology organization.</li></ul></div>
Workplace type:
Hybrid Working
About NTT DATA 
NTT DATA is a $30+ billion business and technology services leader, serving 75% of the Fortune Global 100. We are committed to accelerating client success and positively impacting society through responsible innovation. We are one of the world&rsquo;s leading AI and digital infrastructure providers, with unmatched capabilities in enterprise-scale AI, cloud, security, connectivity, data centers and application services. Our consulting and industry solutions help organizations and society move confidently and sustainably into the digital future. As a Global Top Employer, we have experts in more than 50 countries. We also offer clients access to a robust ecosystem of innovation centers as well as established and start-up partners. NTT DATA is part of NTT Group, which invests over $3 billion each year in R&amp;D.
Equal Opportunity Employer 
NTT DATA is proud to be an Equal Opportunity Employer with a global culture that embraces diversity. We are committed to providing an environment free of unfair discrimination and harassment. We do not discriminate based on age, race, colour, gender, sexual orientation, religion, nationality, disability, pregnancy, marital status, veteran status, or any other protected category. Join our growing global team and accelerate your career with us. Apply today.
Third parties fraudulently posing as NTT DATA recruiters
NTT DATA recruiters will never ask job seekers or candidates for payment or banking information during the recruitment process, for any reason. Please remain vigilant of third parties who may attempt to impersonate NTT DATA recruiters&mdash;whether in writing or by phone&mdash;in order to deceptively obtain personal data or money from you. All email communications from an NTT DATA recruiter will come from an @nttdata.com email address. If you suspect any fraudulent activity, please contact us.</div>

Security Threat Intelligence and Hunting Analyst

Search 3707+ Cyber threat analyst jobs near you this March. New roles added regularly across leading industries. Apply today.