Job Description

CI Cyber Threat Analyst SME is tasked to provide expert input for the Counter Intelligence (CI) Cyber Branch to produce weekly, monthly, quarterly threat reports, and one annual threat study for each specific focus or area. The SME will provide relevant information for the CI Cyber Branch to produce annual intelligence information reports (IIR). The SME will provide relevant input for reports detailing the weekly activities of the Cyber Branch. Duties may include: * Produce weekly, monthly, and quarterly, actionable Technical CI (Cyber/TSCM/TEMPEST) threat reports in collaboration with teammates, NGA partners, and intelligence community (IC) peers, as necessary. * Threat data collected and reported by NGA Technical CI team and network security personnel. * Intelligence reported by the Intelligence Community. * Fusion of all-source threat analysis derived from multiple intelligence (Multi-INT) sources. * Utilize imagery intelligence when available. * Depiction of Technical CI threat(s) to NGA to inform security decision makers. * Compilation of data collected and reported in weekly and monthly IIRs and products. * Raw and/or finished Intelligence reported by the IC. * Analytic judgments, intelligence gaps, and overall technical threat(s) to NGA. * Produce CI Information Reports and IIRs from data collected and reported by either the Technical CI team or the NGA cyber security personnel. Effective IIR writing requires collaboration with teammates and stakeholders to ensure accuracy of reported information. * Cross-referencing local information reporting with IC reporting. * Clear and concise writing to briefly convey threat. * Responsiveness to IC priority collections requirements. * Perform inquiries of anomalous activity using automated investigative tools (For example: M3, Palantir, TAC, ARCSIGHT, RSA Security Analytics, CCD, QLIX, TIDE or Criss Cross). * Provide Technical CI advice and expertise in support of CI inquiries, operations and issues. * Develop leads by detecting anomalous activity, conducts open source and classified research, and liaison with internal and external partners. * Conduct research, evaluate collection, and perform analysis on Technical CI topics of interest to leadership, analysts and customers. * Provide high-quality, appropriate and objective conclusions from information in a timely manner. * Research, analyze, and synthesize all-source data to identify patterns, commonalities, and linkages. * Provide current SME on Technical CI issues, threats and trends. (For example: Cyber threats and Technical Surveillance threats.) * Produce clearly written, properly sourced, grammatically correct, self-edited intelligence products that adhere to established style guide and template standards. * Proficiency use of bottom-line-up-front (BLUF) writing. * Collaborate with internal NGA and external IC/Cyber community members. * Coordinate CI Cyber activities originating from Enterprise Incident Response Events. * Conduct liaison between CI Office, Insider Threat, Cyber Security Operations Center (CSOC), other NGA Offices, and IC/DoD partners as applicable to conducting the CI Cyber Mission. * Perform threat analysis, threat forecasts, threat alerts, and recommend countermeasures. Skills and Experience: Required: * Shall possess a minimum of 11 years Threat Analysis experience, of which at least 5 of those years include Technical Threat Analysis experience or cyber investigations. * Possess or obtain certification to comply with DoD 8570.01-M Information Assurance (IA) requirements within one calendar year of assignment at the sole expense of the vendor. Shall possess or obtain and maintain IA II certification. See DoD 8570.01-M for acceptable certifications for each IA level. Desired: * Be a credentialed graduate of an accredited federal or DoD CI training academy * Possess a Bachelor's degree in Science, Technology, Engineering or Mathematics disciplines. * Possess post-graduate degree in Science, Technology, Engineering, or Mathematics disciplines. * Possess knowledge and understanding of foreign adversaries' security and intelligence services, terrorist organizations, and threats posed to US Gov. * Experience translating Government vision into understandable and achievable measures. * Experience using supervisory skills to coach teammates to achieve objectives * Monitor and track progress towards achievable measures. Security Clearance: * Active TS/SCI and the willingness to sit for a polygraph, if needed IC-CAP provides equal employment opportunities (EEO) to all applicants for employment without regard to race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, disability, genetic information, marital status.

Job Tags

Similar Jobs