CI Cyber Threat Technical Analysis (Level III) (St Louis)

CI Cyber Threat Technical Analysis (Level III)

CI Cyber Threat Technical Analysis (Level III) will ensure all required reports are complete with minimal errors and that all processes, activities, and reports are conducted with in established time frames. He or she will also ensure analysts are trained in and follow the current standard operating procedures. Duties may include :

• Support team members in completing forensics reports, CI Cyber Inquiries, and monthly, quarterly, and annual CI Cyber Threat reports. Support includes, but is not limited to, written and technical analysis that contributes to the understanding of a particular threat or situation.
• Identify, analyze, define, and coordinate user, customer and stakeholder needs and translate them into technical requirements.
• Detect anomalous activity through network data analysis.
• Record best practices, lessons-learned, processes and procedures, and other pertinent quality topics in appropriate formats.
• Evaluate Intrusion Detection, incident tickets, event and log analysis, security change tracking and other network security systems and devices.
• Provide written reports based on findings.
• Perform work without appreciable direction and exercising considerable latitude in the determination of technical objectives of assignments.
• Participate in special projects as required.
• Assist in the development and delivery of malware threat awareness products and briefings.
• Participate in technical meetings and working groups to address issues related to malware threats and vulnerabilities.
• Collaborate with customers and team members consisting of computer security and CI investigators and forensic analysts and other internal and external organizations to facilitate a premier malware program.
• Thoroughly investigate instances of malicious code to determine attack vector, payload, potential origin, and determine extent of damage and data exfiltration.
• Develop analysis and make recommendations for the purchase of software that will mitigate malware intrusions.
• Identify risks to computer systems and make recommendations for corrective actions.
• Coordinate CI Cyber activities originating from Enterprise Incident Response Events.
• Conduct liaison between CI Office, Insider Threat, Cyber Security Operations Center (CSOC), and other NGA Offices as applicable to conducting the CI Cyber Mission.
• Perform threat analysis, threat forecasts, threat alerts, and recommend countermeasures.

Skills and Experience : Required :

Desired :

Security Clearance : Active TS / SCI and the willingness to sit for a polygraph, if needed

IC-CAP provides equal employment opportunities (EEO) to all applicants for employment without regard to race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, disability, genetic information, marital status.