threat analyst

B&S Group

<div><b>Company Description</b><p><b><br>
This is B&amp;S</b></p><p>
B&amp;S exists to make premium consumer goods available to everyone, anywhere. We believe that getting access to consumer products that bring joy and comfort into everyday lives, should be easy around the globe.</p><p>
Are you curious about who we are as an employer and our thoughts on diversity and inclusion? Click here to find more information!</p><b><br>
Job Description</b><p><br>
We are looking for an IT Risk and Threat Analyst to support the IT risk management practice, ensuring that risks are proactively identified, mitigated, communicated, and monitored. The role involves recommending appropriate and effective management processes across all aspects of information technology for B&amp;S. The analyst will also analyze cyber-threats, identify patterns in cyber-attacks, and report on emerging cyber-threat trends. This position requires close collaboration with IT, Security, Risk, and Business teams to enable data-driven risk management and strengthen overall cybersecurity posture.<br>
<br>
<b>Key Responsibilities</b></p><ul><li>
Work closely with other technical, incident management, and security analysts to develop a fuller understanding of cyber threat actor&rsquo;s intent, objectives, and activities of cyber threat actors and define a world-class cyber defense program.</li><li>
Conduct research and evaluate technical and all-source cyber intelligence to develop in-depth assessments of threats to the organization&rsquo;s networks, systems, users, and data.</li><li>
Ensure effective execution of the risk management framework by managing relationships with key stakeholders within strategic business groups and technology.</li><li>
Verify that IT risks are appropriately mitigated and lead multiple stakeholders in agreement on appropriate solutions/controls</li><li>
Create technical assessments and cyber threat profiles of current events based on the inventive collection and research using classified and open information sources to enable advanced threat intelligence</li><li>
Develop, track, and report on Key Risk Indicators (KRIs) for information technology.</li><li>
Monitor, track, and report mitigation and resolution of IT risks.</li><li>
Perform process-level walkthroughs, control testing, etc. for the identification and assessment of IT risks and controls.</li></ul><p></p><b><br>
Qualifications</b><br>
<ul><li>
Have a bachelor&rsquo;s degree in IT or computer science.</li><li>
Have 5+ years of IT experience within a similar role.</li><li>
Have professional certifications like CISSP, CISM, CISA, or CRISC.</li><li>
Understand key technology concepts such as access control, confidential data, encryption, business continuity, info-sec scans, and vendor apps.</li><li>
Have a strong knowledge of IT organization business processes and systems including (IT Security, data management, architectural and planning, technology life cycle management, regulatory concerns).</li><li>
Have a strong communication skill to work effectively with employees at all levels of the organization.</li><li>
Have excellent problem-solving skills and the ability to be highly productive, working alone and as part of a team.</li></ul><br>
<b>
Additional Information</b><p><b><br>
We offer you</b></p><ul><li>
A good salary fitting with your experience, and a discretionary yearly performance-based bonus</li><li>
A good working atmosphere in a young and ambitious team.</li><li>
Company sponsored visa along with health insurance.</li><li>
Leave benefits as per UAE labour law.</li><li>
Annual air-ticket to your home country</li></ul><p><b>
Why join us?</b></p><ul><li>
Be part of a multinational and multicultural company.</li><li>
Dynamic, multicultural environment fostering innovation and professional growth.</li><li>
Opportunity to contribute to high-impact financial strategies.</li></ul><p><b>
Where will you be working?</b><br>
You will be working in our Dubai office, where you will benefit from the guidance and support of our diverse team. Alongside your responsibilities, you will have the opportunity to immerse yourself in a collaborative culture that emphasizes teamwork, creativity, and a strong work ethic.</p></div>

IT Risk & Threat Analyst

bs-group

<p>Work closely with other technical, incident management, and security analysts to develop a fuller understanding of cyber threat actor s intent, objectives, and activities of cyber threat actors and define a world-class cyber defense program.</p> <ul> <li>Conduct research and evaluate technical and all-source cyber intelligence to develop in-depth assessments of threats to the organization s networks, systems, users, and data.</li> <li>Ensure effective execution of the risk management framework by managing relationships with key stakeholders within strategic business groups and technology.</li> <li>Verify that IT risks are appropriately mitigated and lead multiple stakeholders in agreement on appropriate solutions/controls</li> <li>Create technical assessments and cyber threat profiles of current events based on the inventive collection and research using classified and open information sources to enable advanced threat intelligence</li> <li>Develop, track, and report on Key Risk Indicators (KRIs) for information technology.</li> <li>Monitor, track, and report mitigation and resolution of IT risks.</li> <li>Perform process-level walkthroughs, control testing, etc. for the identification and assessment of IT risks and controls.</li> </ul> <p>Have a bachelor s degree in IT or computer science.</p> <ul> <li>Have 5+ years of IT experience within a similar role.</li> <li>Have professional certifications like CISSP, CISM, CISA, or CRISC.</li> <li>Understand key technology concepts such as access control, confidential data, encryption, business continuity, info-sec scans, and vendor apps.</li> <li>Have a strong knowledge of IT organization business processes and systems including (IT Security, data management, architectural and planning, technology life cycle management, regulatory concerns).</li> <li>Have a strong communication skill to work effectively with employees at all levels of the organization.</li> <li>Have excellent problem-solving skills and the ability to be highly productive, working alone and as part of a team.</li> </ul>

DTS Solution

Role and Responsibilities 
 
 <div>
 <div>
 <ul>
 <li>
<i> </i> 
 Work as a Cyber Threat Intel Analyst in DTS Solution   HawkEye CSOC cyber command center.<br> </li>
 <li>
<i> </i> 
 Analyze and research known indicators, correlate events, identify malicious activity, and discover new sources to provide early warning related to a variety of Cyber threats.<br> </li>
 <li>
<i> </i> 
 Monitor Open Source information feeds and threat actor activity to identify activity levels and indicators for Cyber threats and Cyber-attacks.<br> </li>
 <li>
<i> </i> 
 Identify Open Source Intelligence (OSINT) threats relevant to the DTS Solution - HawkEye CSOC customer s environment and develop relevant reports.<br> </li>
 <li>
<i> </i> 
 Provide daily (business day) collections, reviews, analysis and filtering of Open Source Intelligence (OSINT) and SOCMINT (Social Media Intelligence)<br> </li>
 <li>
<i> </i> 
 Identify and investigate malicious actors with the interest and capability to target client and its infrastructure.<br> </li>
 <li>
<i> </i> 
 Develop and provide a Cyber Threat Intelligence Report, Monthly Report and Quarterly Report and an Annual Report.<br> </li>
 <li>
<i> </i> 
 Reviews all current threat intelligence feeds in use, categorizes and prioritizes by relevancy.<br> </li>
 <li>
<i> </i> 
 Provide proactive APT hunting, incident response support, and advanced analytic capabilities.<br> </li>
 <li>
<i> </i> 
 Analyze threat information reports and intelligence summaries, trends, gaps, and methods of operation.<br> </li>
 <li>
<i> </i> 
 Review audit logs and identify any unusual or suspect behavior.<br> </li>
 <li>
<i> </i> 
 Initiates ad-hoc threat intelligence work parcel assignments for Tier I/II analysts and reviews/expands the SOC daily recurring activity SOP s.<br> </li>
 <li>
<i> </i> 
 Develops reports that can be sent for awareness to various groups and levels of leadership.<br> </li>
 <li>
<i> </i> 
 Engage constructively in cross-functional projects designed to improve DTS Solution - HawkEye CSOC and its customers  security postures.<br> </li>
 <li>
<i> </i> 
 Understanding of geo-political dynamics and how they affect the wider cyber threat landscape.<br> </li>
 <li>
<i> </i> 
 Experience using Cyber Kill Chain.<br> </li>
 <li>
<i> </i> 
 Expertise on in using Threat Intelligence Platforms (Recorded Future, Flashpoint, Blueliv, Anomali, ThreatIQ etc.)<br> </li>
 <li>
<i> </i> 
 Expertise in using Digital Risk Management platforms that looks for dark web activities, breaches,<br> </li>
 <li>
<i> </i> 
 Have a curated list of important threat intel fusion across various sources<br> </li>
 <li>
<i> </i> 
 Knowledge on dark web and accessing dark web forums, IRCs, chat groups etc.<br> </li>
 <li>
<i> </i> 
 Knowledge on APT groups and monitoring all activities through handlers<br> </li>
 <li>
<i> </i> 
 Curate newsletter and social media weekly posts based on weekly activities in the cyberspace.<br> </li>
 </ul>
 </div>
 </div>
 <div>
 <div>
 <div>
</div>
 </div>
 </div>
 <div>
 <div>
 Qualifications </div>
 </div>
 <div>
 <div>
 <ul>
 <li>
<i> </i> 
 4+ years of experience on extract and disseminate open source intelligence (OSINT)<br> </li>
 <li>
<i> </i> 
 Regional expertise as applied to threat actors<br> </li>
 <li>
<i> </i> 
 Familiarity with alternative analysis techniques and predictive analysis methodology<br> </li>
 <li>
<i> </i> 
 Experience with conducting intelligence investigations and familiarity with investigative tools, including Maltego, DomainTools, and VirusTotal<br> </li>
 <li>
<i> </i> 
 Familiarity with Threat Rating Methodology<br> </li>
 <li>
<i> </i> 
 Experience using Threat Intelligence Platforms (TIPs)<br> </li>
 <li>
<i> </i> 
 Active memberships with associations across the security and intelligence community<br> </li>
 </ul>
 </div>
 </div>
 <div>
 <div>
 <div>
</div>
 </div>
 </div>
 <div>
 <div>
 Certifications </div>
 </div>
 <div>
 <div>
 <ul>
 <li>
<i> </i> 
 Certified Ethical Hacker (CEH)<br> </li>
 <li>
<i> </i> 
 SANS Certified Intrusion Analyst (GCIA)<br> </li>
 <li><br></li></ul></div></div><div><div><div><div><div><div><div> </div>
 </div>
 <div>
 <div>
 <div></div></div></div></div></div></div></div></div>

Cyber Threat Intelligence Analyst

<p><b>Job Responsibilities</b></p><p><b>Key Focus Areas (Up to 7)Key Activities</b></p><p><b>Threat Intelligence</b></p><ul><li>Leads a team of threat intelligence analyst to collect, analyze and distribute relevant and actionable threat intelligence to clients</li><li>Responsible for the quality and timeliness of the team s reports, briefs, presentations, findings and recommendations including executive level threat reporting</li><li>Responsible for measuring and reporting on CTI value and customer satisfaction</li><li>Leads the development, management, optimization and continuously improvement of processes to enhance the overall cyber threat intelligence function</li><li>Leads and contributes practically in key projects</li><li>Preparation of intelligence products, including high-quality reports, assessments, briefings, recommendations, and findings</li><li>Establishes and maintains relationships with public and private intelligence community members</li></ul><p><b>Resource Management</b></p><p>People: Interfaces with clients and SOC personnel to ensure that timely, relevant and actionable threat intelligence is communicated. High quality service is provided</p><p>Nature of Interaction</p><p>Internal: Point of Contact for Threat Intelligence Request</p><p>External: Clients for threat intelligence reach back tasks</p><p><b>Problem Solving</b></p><p>Exceptional problem-solving skills. Uses previous experience to identify the most appropriate option or to adapt or improve existing approaches. Resolves issues which are varied and non-routine.</p><p><b>AOR (Any Other Responsibilities)</b></p><p>Any other responsibilities as required by the Line Manager</p><p><b>Job SpecificationsSkills/Certifications (Technical &amp; Non-Technical)</b></p><p>Ability to work well with others in a fast-paced dynamic environment</p><p>Excellent verbal and written communication skills with strong interpersonal, facilitation &amp; communication skills</p><p>Previous experience leading cost effective, high-value threat intelligence teams</p><p>Experience in analyzing, gathering intelligence on, developing, and documenting threat group activities</p><p>In-depth knowledge and understanding of technology, emerging trends, adversary techniques, vulnerabilities, exploits and keeping up to date on current affairs</p><p>In-depth knowledge and understanding of cyber-attack vectors, detection techniques, cybercrime networks and methodologies</p><p>Demonstrated understanding of remediation and counter measures for addressing information security threats.</p><p>Knowledge of security analysis techniques</p><p>Ability to monitor and enforce improvements when necessary, in line with best practices</p><p>Experience with briefing executive management including C-level on cyber incidents, metrics and trends</p><p>Strong working understanding of threat intel platforms</p><p>Experience working in large scale security operations especially large corporations, military or government organizations</p><p><b>Minimum Work Experience</b></p><p>Functional Experience: 10+ years' experience working in a Cyber Threat intelligence, incident response, cyber hunt, or other technical information security positions</p><p>Leadership/Supervisory Experience5+ years of demonstrable management experience within Cyber Threat Intelligence</p><p>Experience in training and providing mentorship to members of the team.</p><p>Performance management and the ability to conduct performance evaluations</p><p><b>Education</b></p><p>Bachelor s degree in Computer Information Systems or a related discipline, or equivalent experience CISSP, CISM, or similar Information Security certification is preferred</p><p>Any Certifications such as GCTI, CREST Threat intelligence Analyst, CREST Threat intelligence Manager, GCIH, GCFA, GREM, GDAT is mandatory. OSCP is desirable.</p><p>Operating System Knowledge: Windows, Linux/Unix, and Mac/OSX.</p><p>Scripting (Shell, Python, R, etc.)</p><p>Big Data Analysis experience</p>

Manager - Threat Intelligence

Naufar

<div>
 <p>
  <strong>
   JOB PURPOSE:
  </strong>
 </p>
 <p>
  The Cyber Security Analyst creates a comprehensive program for establishing a Healthcare carrier-class Security Operation Center. S/he develop and maintain threat monitoring and security incident response procedures within Naufar. The analyst designs frameworks, procedures, and toolkits to enhance capabilities in professional forensic collection and digital evidence analysis. S/he also develop dashboards for reporting the organization's threat landscape, Awareness and security posture to senior management. This role is expert role with roles and responsibilities.
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Description
  </strong>
 </p>
 <ul>
  <li>
   Develops and implements a cyber-security program to enhance Naufar capabilities regarding Cyber Attack incident monitoring, incidents response and intrusive and non-intrusive forensics capabilities.
  </li>
  <li>
   Develops and matures the service capabilities of the SOC, such as Forensics, Threat Management, Penetration Assessments, and Tool Management.
  </li>
  <li>
   Develops, Contributes and maintains of the cyber security strategy.
  </li>
  <li>
   Implements, configures and maintains security control and process, to ensure threat indicators are rated by severity and responded to in a manner consistent with the threat.
  </li>
  <li>
   Identifies deficiencies and recommends corrective action to strengthen information security control and decrease the risk of data breach.
  </li>
  <li>
   Maintains and updates standard operation policies and procedures for incident response plans, e-discovery processing, remote acquisition/analysis tools, collections and forensic analysis techniques.
  </li>
  <li>
   Maintains industry standard tools and processes used for forensic analysis and eDiscovery collections and processes.
  </li>
  <li>
   Monitors security alerts for potential events/incidents as well as trending and historical analysis and ensuring all incident reports are complete and written within standard operations and ensures ticket audits and reviews are completed
  </li>
  <li>
   Utilizes leading forensic software to identify, collect, preserve and analyze electronic data from laptops, desktops, servers, email archives, infrastructure logs, network file servers, backup tapes, cell phones, PDAs and a wide variety of other media devices.
  </li>
  <li>
   Manages requests for electronic data and digital forensic investigations that relate to Litigation, Regulatory matters, Compliance, and Employee Investigations.
  </li>
  <li>
   Performs cybersecurity incident analysis and assist with incident response, including analysis of network content and metadata for investigations or malware detection and identifies the cause and extent of a breach.
  </li>
  <li>
   Serves as a subject matter expert and technical advisor in matters relating to the proper collection, preservation, packaging, and submission of digital and multimedia evidence.
  </li>
  <li>
   Participates in incident electronic evidence collection activities in major field investigations. Ensures evidence handling requirements are met.
  </li>
  <li>
   Performs post-incident report according to standard operations.
  </li>
  <li>
   Analyzes the tools and methodology used for investigation and accordingly presents improvements in control and corrective actions if any.
  </li>
  <li>
   Escalates and works with senior management on resolutions to overdue security items or any negative trends identified.
  </li>
  <li>
   Develops focused reporting and briefings for advanced cyber threats.
  </li>
  <li>
   Conducts studies and research for improving forensic analyses, scientific methods, and resolving forensic examination problems.
  </li>
  <li>
   Creates detailed, professional documentation and reports, including performance metrics and presentations for management.
  </li>
  <li>
   Leads or contributes to key projects related to corporate threat monitoring, forensics or information security initiatives.
  </li>
  <li>
   Facilitates group risk assessment activities and identifies any security-related process improvement opportunities.
  </li>
  <li>
   Monitors and performs trending on root cause analysis activities within assigned group and participates as needed to resolve clinical systems security related incidents.
  </li>
  <li>
   Assists on monitoring compliance with information security policies, standards and ENTERPRISE-WIDE strategy and facilitates threat and vulnerability evaluations on a regular basis. Measures and reports on the effectiveness of information security controls.
  </li>
  <li>
   Supports the security initiatives, corrective and preventative actions, and security measures by ensuring timely updates and escalating concerns and non-compliances.
  </li>
  <li>
   Understands and maintains the appropriate knowledge of Security Technologies, (Firewall, Anti-Virus, Email and Web Encryption, HIPS, NIPS, SIEM, WAF, DLP), security procedures, and services within Naufar IT Security as well as ensures all tools are functioning properly.
  </li>
  <li>
   Keeps up to date on changes to significant regulatory and applicable standards issued by internal or external agencies, as applicable to the Naufar&rsquo;s domain.
  </li>
  <li>
   Adheres to Naufar&rsquo;s standards as they appear in the Code of Conduct and Conflict of Interest policies
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Academic Qualifications:
  </strong>
 </p>
 <ul>
  <li>
   Bachelor&rsquo;s degree &ndash; IT - Mandate
  </li>
  <li>
   Master&rsquo;s degree &ndash; Cybersecurity - Desired
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Experience Requirements:
  </strong>
 </p>
 <ul>
  <li>
   8+ years of experience working as a security analyst or SME within a Security Operations Center with exposure to cyber security collection, analysis and threats management, investigation and digital forensics.
  </li>
  <li>
   Demonstrated experience in threat detection and analysis, incident response, and reporting.
  </li>
  <li>
   Demonstrated experience with incident response, deep dive forensics, insider threat, cyber and data exfiltration incidents.
  </li>
  <li>
   Demonstrated experience conducting assessments, digital forensic investigations, vulnerability management and incident response.
  </li>
  <li>
   Demonstrated experience with current cyber threats and the associated tactics, techniques, and procedures used to infiltrate computer networks.
  </li>
  <li>
   Demonstrated experience with SEIM products in the detection, response, mitigation, and/or reporting of cyber threats
  </li>
  <li>
   Demonstrated experience in the use of forensic tools (e.g. FTK, Encase, Forensic Toolkit, X-Ways, Linux based tools, etc.)
  </li>
  <li>
   Experienced with (or equivalent) the following regulations and frameworks: PCI, HIPAA, and ISO/IEC 2700x
  </li>
 </ul>
</div>


Cyber Security Analyst

Role and Responsibilities 
 
 <div>
 <div>
 <ul>
 <li>
<i> </i> 
 Work as a Cyber SOC Tier 1 Analyst in DTS Solution   HawkEye CSOC cyber command center.<br> </li>
 <li>
<i> </i> 
 The security analyst Tier 1 monitors security events from the various SOC entry channels (SIEM, Tickets, Email and Phone), based on the security event severity, escalate to managed service support teams, tier 2 security analyst, and/or customer as appropriate to perform further investigation and resolution.<br> </li>
 <li>
<i> </i> 
 Reviews trouble tickets generated by SIEM Leverages emerging threat intelligence (IOCs, updated rules, etc.) to identify affected systems and the scope of the attack.<br> </li>
 <li>
<i> </i> 
 Reviews and collects asset data (configs, running processes, etc.) on systems for further investigation.<br> </li>
 <li>
<i> </i> 
 Will actively monitor security threats and risks, provide in-depth incident analysis, evaluate security incidents, and will provide proactive threat research.<br> </li>
 <li>
<i> </i> 
 Work closely with the Tier 2 Analyst to assess risk and provide recommendations for improving DTS Solution - HawkEye CSOC s customer security posture.<br> </li>
 <li>
<i> </i> 
 Participate in security incident management and vulnerability management processes. Identify, perform, review or track security incident investigations to resolution and identify lessons learnt.<br> </li>
 <li>
<i> </i> 
 Identify, perform or review root cause analysis efforts following incident recovery to enhance operations.<br> </li>
 <li>
<i> </i> 
 Participate in evaluating, recommending, implementing, and troubleshooting security. solutions and evaluating IT security of the new IT Infrastructure systems.<br> </li>
 <li>
<i> </i> 
 Ensure that corporate data and technology platform components are safeguarded from known threats.<br> </li>
 <li>
<i> </i> 
 Develop, implement and test new SIEM use cases. Regularly identify and develop new use cases for automation and tuning of security tools<br> </li>
 <li>
<i> </i> 
 Provide technical guidance to the customer s technical teams during the configuration of new log sources.<br> </li>
 <li>
<i> </i> 
 Understanding and implementing the SOC processes and procedures.<br> </li>
 <li>
<i> </i> 
 Follow standard operating procedures for detecting, classifying, and reporting.<br> </li>
 <li>
<i> </i> 
 Triage events for criticality and escalate according to predefined processes incidents under the supervision of Tier 2 and Tier 3 staff.<br> </li>
 <li>
<i> </i> 
 Communicate effectively with customers, team-mates, and management.<br> </li>
 <li>
<i> </i> 
 Provide input on tuning and optimization of security systems.<br> </li>
 <li>
<i> </i> 
 Follow ITIL practices regarding incident, problem and change management.<br> </li>
 <li>
<i> </i> 
 Document and maintain customer build documents, security procedures and processes.<br> </li>
 <li>
<i> </i> 
 Stay up to date with current vulnerabilities, attacks, and countermeasures.<br> </li>
 <li>
<i> </i> 
 Reviews the latest alerts to determine relevancy and urgency.<br> </li>
 <li>
<i> </i> 
 Creates new trouble tickets for alerts that signal an incident and require Tier 2 / Incident Response review.<br> </li>
 <li>
<i> </i> 
 Manages and configures security monitoring tools (SIEM, SYSLOG, NETFLOW, FIM, SYSMON etc.)<br> </li>
 </ul>
 </div>
 </div>
 <div>
 <div>
 <div>
</div>
 </div>
 </div>
 <div>
 <div>
 Qualifications </div>
 </div>
 <div>
 <div>
 <ul>
 <li>
<i> </i> 
 3+ years of experience of network/security architecture or operations experience<br> </li>
 <li>
<i> </i> 
 Experience working on specific SOC/SIEM platforms<br> </li>
 <li>
<i> </i> 
 Excellent experience in Elastic (ELK), Splunk, Wazuh, LogRhythm<br> </li>
 <li>
<i> </i> 
 Experience in SOAR technologies   Demisto, Cybersponse, FortiSOAR, Swimlane<br> </li>
 <li>
<i> </i> 
 Excellent experience in MDR or EDR<br> </li>
 <li>
<i> </i> 
 Experience in using security tools   commercial and open source<br> </li>
 <li>
<i> </i> 
 Experience in defensive technologies   NGFW, AV, VPN, IPS, NETFLOW, DAM, WAF, Proxy, Web Filtering etc. Ability to inspect using PCAP files.<br> </li>
 <li>
<i> </i> 
 Knowledge with Threat Hunting and MITRE ATT&amp;CK Methodology<br> </li>
 </ul>
 </div>
 </div>
 <div>
 <div>
 <div>
</div>
 </div>
 </div>
 <div>
 <div>
 Certifications </div>
 </div>
 <div>
 <div>
 <ul>
 <li>
<i> </i> 
 GIAC Certified Intrusion Analyst (GCIA)<br> </li>
 <li>
<i> </i> 
 GIAC Certified Enterprise Defender (GCED) issued by GIAC<br> </li>
 <li>
<i> </i> 
 GIAC Certified Incident Handler (GCIH) issued by GIAC<br> </li>
 <li>
<i> </i> 
 Certified Ethical Hacker (CEH) issued by EC-Council<br> </li>
 <li><br></li></ul></div></div><div><div><div><div><div><div><div> </div>
 </div>
 <div>
 <div>
 <div></div></div></div></div></div></div></div></div>

SOC Analyst - Tier 1

Booz Allen Hamilton

<div>Malware Analyst<p><b>
The Opportunity:</b></p><p>
As a security operations center analyst, you&rsquo;re in the middle of the action, responding to and mitigating threats in real time. You&rsquo;re the first line of cyber defense for your organization, and they look to you for guidance on best practices and security measures. We need a SOC analyst like you to help us secure critical infrastructure from the constant onslaught of cyber attacks.</p><p></p><p>
As an SOC analyst on our team, you&rsquo;ll develop network defense skills as you learn to monitor, detect, and analyze threats by interacting directly with affected users and state-of-the-art tools and technologies.
</p><p></p><p>When an incident is detected, you&rsquo;ll work with the team to collect data to help incident response understand and mitigate the threat. You&rsquo;ll analyze alerts to figure out just how many systems are affected and initiate recovery efforts. You&rsquo;ll contribute to assessments and learn how to analyze patterns to understand attackers&rsquo; goals to stop them from succeeding. This is a great opportunity to hone your cybersecurity skills and learn more about threat assessment and incident response.
</p><p></p><p>Work with us as we defend against malicious actors.</p><p></p><p>
Join us. The world can&rsquo;t wait.</p><p></p><p><b>
You Have:</b></p><ul><li><p>
4+ years of experience in a SOC, incident response, or cyber threat analysis role</p></li><li><p>
Experience in analyzing logs, network traffic, digital forensics, malware analysis, threat intelligence, and cybersecurity</p></li><li><p>
Experience with incident response frameworks, such as NIST or MITRE ATT&amp;CK</p></li><li><p>
Knowledge of SIEM, such as Splunk, Elastic, QRadar, or Sentinel, EDR, such as CrowdStrike or Microsoft Defender, IDS, and IPS</p></li><li><p>
Knowledge of operating system-specific exploitation vectors</p></li><li><p>
TS/SCI clearance</p></li><li><p>
Bachelor&rsquo;s degree in Cybersecurity or Information Technology and 5+ years of experience in Cybersecurity, or 10+ years of experience in Cybersecurity in lieu of a degree</p></li><li><p>
DoD 8140 Level II Certification, such as Security+, CySA+, or CISSP</p></li><li><p>
GCIH, GCIA, CEH, or CISSP Certification</p></li></ul><p></p><p><b>
Nice If You Have:</b></p><ul><li><p>
Experience supporting Air Force or DoD Cyber Protection Teams (CPTs) or cyber threat intelligence missions
</p></li><li><p>Experience in malware classification, unpacking, and behavioral analysis</p></li><li><p>
Experience developing custom scripts and automation in Python or PowerShell for analysis workflows</p></li><li><p>
Knowledge of adversary TTPs and frameworks such as MITRE ATT&amp;CK and CAPEC</p></li><li><p>
Knowledge of cyber kill chain methodologies</p></li><li><p>
Master&rsquo;s degree in Cybersecurity, Computer Engineering, or Digital Forensics</p></li><li><p>
GREM, GCFA, or OSCP Certification</p></li></ul><p></p><p><b>
Clearance:
</b></p><p>Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; TS/SCI clearance is required.</p><p></p><p><b>
Compensation</b></p><p>
At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen&rsquo;s benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page.</p><p></p>
Salary at Booz Allen is determined by various factors, including but not limited to location, the individual&rsquo;s particular combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability and organizational requirements. The projected compensation range for this position is $55,300.00 to $126,000.00 (annualized USD). The estimate displayed represents the typical salary range for this position and is just one component of Booz Allen&rsquo;s total compensation package for employees. This posting will close within 90 days from the Posting Date.<p></p><p><b>
Identity Statement</b></p><p>
As part of the application process, you are expected to be on camera during interviews and assessments. We reserve the right to take your picture to verify your identity and prevent fraud.</p><p></p><p><b>
Work Model</b><br>
Our people-first culture prioritizes the benefits of flexibility and collaboration, whether that happens in person or remotely.</p><ul><li>
If this position is listed as remote or hybrid, you&rsquo;ll periodically work from a Booz Allen or client site facility.</li><li>
If this position is listed as onsite, you&rsquo;ll work with colleagues and clients in person, as needed for the specific role.</li></ul><p></p><p><b>
Commitment to Non-Discrimination</b></p><p>
All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, local, or international law.</p></div><p></p>

Malware Analyst

Search 3207+ Threat analyst jobs near you this November. New roles added regularly across leading industries. Apply today.

3207 threat analyst jobs NEAR_ME

IT Risk & Threat Analyst

IT Risk & Threat Analyst

Cyber Threat Intelligence Analyst

Manager - Threat Intelligence

Cyber Security Analyst

SOC Analyst - Tier 1

Malware Analyst