Cybersecurity Ops Analyst Sr

SAIC is seeking a candidate to fill a Cybersecurity Ops Analyst Sr. position on a joint Contractor-Government Team with our customer at Ft. Meade, MD. Candidate shall perform cyber threat intelligence, draft Indicators of Compromise products, computer network defense, Incident Response, Threat Analysis, and Cyber Investigations in support of the customer's aligned missions and deployable Incident Response Teams.

Job Duties:

• Demonstrated familiarity with intelligence tradecraft, cyber threat intelligence methodologies, and cyber threat frameworks (MITRE ATT&CK, Cyber Kill Chain, etc.).
• Demonstrated strong writing and briefing skills; experience delivering reports to senior leadership.
• Conduct threat analysis utilizing various sources to identify threats.
• Conduct analysis of and determine relevancy of threats and cyber threat landscape, and articulate recommendations for mitigating and detecting threats.
• Produce IC standard written reports and provide verbal briefings to senior military leaders.
• Collection, aggregation, and interpretation of log data from various sources.
• Correlation of data from multiple sources, including host, network, user, and intelligence reports, to uncover threats.

Required Education and Experience:

• Bachelors and five (5) years or more experience; four (4) additional years of work experience accepted in lieu of degree.
• Experience with Big Data Platform, Joint Cyber Warfare Architecture (JCWA) Common Runtime Stack for Data (JCRS-D).
• Experience in network analysis using PCAP, network metadata, and security logs.
• Experience using AI.
• Expertise in adversarial cyber actors, historical cyber activity, and the current cyber landscape.
• Experience conducting research on classified systems and utilizing open-source cyber resources.
• Previous experience in a government, military, or intelligence community (IC) role.
• Structured Query Language.
• Detection Engineering.
• Zero Trust Architecture.
• Cloud computing.

Required Security Clearance:

• An active TS/SCI with a CI Poly is required upon starting. Polygraph must have been completed in the last (5) five years.

Desired Qualifications:

• Active industry cyber security and/or technical certifications such as Global Information Assurance Certification (GIAC).
• Government facilitated cyber training would also be considered here.