Apply on Employer Site

Tyto Athene, LLC · 3 days ago

Cyber Threat Intelligence (CTI) Lead

Ashburn, VA

Full-time

Onsite

Senior Level

7+ years exp

Tyto Athene is searching for a Cyber Threat Intelligence (CTI) Lead to support a law enforcement customer in Ashburn, VA. The CTI Lead will drive advanced cyber threat analysis, intelligence collection, and proactive defense strategies while collaborating with threat hunters and analysts to enhance cybersecurity.

Information Technology

Work & Life Balance

No H1B

Security Clearance Required

U.S. Citizen Only

Hiring Manager

Suzanne Murphy

Responsibilities

Lead cyber threat intelligence operations, including collection, analysis, and dissemination of actionable intelligence

Perform host-based and network-based security monitoring to detect and respond to advanced threats

Conduct host- and network-based forensics, including intrusion detection, incident response, and malware analysis

Develop, refine, and support security content such as signatures, detection rules, and other defensive measures

Create scripts and automation tools to support threat detection using languages such as VBScript, Python, C++, HTML, XML, or other relevant formats

Conduct cyber threat analysis to identify mitigation or remediation strategies and develop actionable intelligence to protect organizational IT assets

Trend and report cyber threat metrics to provide leadership with situational awareness

Maintain a comprehensive understanding of the global cyber threat landscape, including threat actors, tactics, techniques, and procedures (TTPs)

Collaborate closely with SOC personnel, threat hunters, and analysts to strengthen overall cybersecurity posture

Qualification

Cyber threat intelligenceSecurity monitoringMalware analysisIncident responseForensicsScriptingAutomationSecurity content developmentCyber threat analysisCISSPGCFAGCFEGREMGNFA

Required

Minimum 7 years' experience as a Tier III senior cybersecurity analyst performing intelligence analysis, collection management, and technical analysis

Minimum 5 years' hands-on experience, including at least the last 2 years, with host-based and network-based security monitoring

Strong background in cybersecurity, with experience in: Host- and network-based forensics, Intrusion detection and incident response, Malware analysis, Security content development (signatures, rules, etc.), Cyber threat intelligence operations

Experience developing scripts and automation to support threat detection in multiple formats

Experience conducting cyber threat analysis, identifying remediation strategies, and producing actionable intelligence

Ability to monitor and analyze cyber threat actors and emerging attack techniques to enhance the organization's IT security posture

TS/SCI Clearance required