Apply on Employer Site

MANTECH · 2 weeks ago

Cyber Threat Intelligence Lead

Ashburn, VA

Full-time

Onsite

Senior Level

7+ years exp

MANTECH seeks a motivated, career and customer-oriented Cyber Threat Intelligence Lead to join our team in Ashburn, VA. The role involves providing leadership and organization to implement critical security solutions that protect the Nation's digital borders while ensuring compliant delivery of network, cyber, and cloud services.

Cyber SecurityInformation TechnologySecurityTelecommunications

Growth Opportunities

No H1B

Security Clearance Required

U.S. Citizen Only

Responsibilities

Establishing and enforcing Cyber Threat Intelligence (CTI) support standards, including monitoring activities and developing cyber threat analysis

Leading the technical analysis of sophisticated threats, identifying the valid Indicators of Compromise (IOCs) and driving the attribution of Advanced Persistent Threats (APTs)

Collecting and analyzing both unclassified and classified sources of information for both foreign and domestic cyber threats

Assisting with the dissemination of cyber threat information to senior management and key stakeholders (e.g., USIC, DoD, Law Enforcement)

Driving the development of scripts to support cyber threat detection (e.g., Python, C++)

Qualification

Cyber Threat IntelligenceTechnical AnalysisScripting PythonScripting C++Cybersecurity ExperienceThreat DetectionGIAC Certifications

Required

Bachelor's degree in computer science, engineering, information technology, or cybersecurity (or five years of relevant work experience in lieu of a degree)

Seven (7+) years of experience as a Tier III senior cyber security analyst performing intelligence analysis, collection management, and technical analysis

Five (5+) years of hands-on experience (with experience in the last two years) including host-based and network-based security monitoring

Experience in developing scripts (VB scripts, Python, C++, HTML, XML) to support threat detection

Must have a current/ active TS/SCI clearance

Must be able to obtain and maintain a CBP BI (Background Investigation)

Must be able to be in a stationary position more than 50% of the time

Must be able to communicate, converse, and exchange information with peers and senior personnel

Constantly operates a computer and other office productivity machinery, such as a computer

The person in this position frequently communicates with co-workers, management, and customers, which may involve delivering presentations. Must be able to exchange accurate information in these situations

The person in this position needs to occasionally move about inside the office to access file cabinets, office machinery, etc

Preferred

Any of the following certifications: GIAC Certified Threat Intelligence (GCTI), GIAC Reverse Engineering Malware (GREM) or GIAC Certified Intrusion Analyst (GCIA)