{bc}
Apply
workday

Threat Intel Lead

Nightwing
Sterling, USA
Full-time
Lead · 4+ years experience
Onsite
Discovered 5 days ago
databrickspower-biservicenowsharepoint

Full Job Posting

Responsibilities:

  • Lead a four-person cyber threat intelligence team to analyze emerging vulnerabilities and adversary campaigns; coordinate response efforts with government and industry partners
  • Translate executive directives and policy into analytic priorities and intelligence collection requirements for analysts; oversee quality assurance of analyst intelligence products and presentations
  • Prioritize and coordinate cross-functional analytic projects, integrate technical data and enriched indicators of compromise into comprehensive adversary assessments that provide direction to cyber defenders
  • Review daily vulnerability reporting to assess risk and potential impacts to critical infrastructure and FCEB entities; communicate findings to technical practitioners and Senior Executive Service (SES) leadership.
  • Use attack surface management tools to assess vulnerability prevalence across federal agencies; develop mitigation plans and coordinate with threat hunting teams to reduce adversary exploitation risk
  • Author and present weekly operational summaries, consolidate intelligence reports, and adversary campaign assessments using open source, commercial, and classified reporting.
  • Monitor emerging threats and disruptive technologies in open source and classified reporting; identify and present findings in actionable recommendations
  • Act as the Subject Matter Expert (SME) on technical matters for the Federal Staff; ensure government ideas are properly presented to external stakeholders and industry SMEs

Required Skills:

  • Must be a U.S. Citizen
  • Must have an active TS/SCI clearance
  • Must be able to obtain DHS Suitability
  • Ability to work with minimal supervision; establish priorities and delivery schedules amid uncertain timelines and set quality assurance criteria for all project deliverables
  • Candidates should have at least four years of experience producing analytic products (reports, briefings, or dashboards) based on real-world threats, incidents, or vulnerabilities
  • Experience assessing adversary campaigns, capabilities, motivations, and tactics, techniques, and procedures to produce operational and strategic intelligence products
  • Experience evaluating vulnerabilities, exposure, exploitability, and evidence of adversary use; assessing potential consequences for Federal Agencies and critical infrastructure
  • Experience correlating indicators of compromise, technical reports, and open source, commercial, and classified reporting to develop supported adversary assessments
  • Experience utilizing attack surface management tools or assessments from red teams
  • Demonstrated team leadership experience; including the ability to mentor and teach new analysts and develop training pipelines
  • Experience with directing cyber threat intelligence research into reports, presentations, and assessments for a variety of technology stacks
  • Experience in developing and delivering technical briefings to both cyber practitioners and SES leadership
  • Knowledge of system and application security threats and vulnerabilities; including how to mitigate the threats or vulnerabilities
  • Desired Skills:
  • Previous work with OT/ICS/SCADA technologies; primarily associated vulnerabilities and historic adversary threats to these systems
  • Experience in any capacity with critical infrastructure
  • Experience with ransomware actors; including interactions or monitoring of access brokers, dark web forums, or negotiations
  • Experience with emerging threats; including space systems, AI, and quantum computing
  • Ability to clean, normalize, enrich, and analyze large datasets with inconsistent formats and schemas; identify and support intelligence assessments from these large datasets
  • Experience in any of the following:
  • Administrative Applications (SharePoint, ServiceNow, Microsoft Teams Automation)
  • Commercial Threat Intelligence (Shodan, Censys, GTI, CrowdStrike)
  • Large Data Analytics and Analysis Applications (DataBricks, Power BI)
  • Threat Intelligence Platforms (Analyst1, OpenCTI)
  • Attack Surface Management (BitSight, Cortex Expanse)
  • Required Education:
  • BS Computer Science, Computer Engineering, Computer Information Systems, Cybersecurity, or related degree, or 10+ years experience in cyber incident management experience or cybersecurity experience with a High school diploma.
  • Desired Certifications:
  • CISM, CISSP, GCTI, GCED, GOSI, CTIA, CySA+
  • Syndeo: ESS-3668
  • Salary & Benefits
  • The salary associated with this position ($122,000-$253,000) is commensurate with the selected candidate’s qualifications, years of relevant experience, and demonstrated level of expertise. Compensation will be determined based on these factors to ensure alignment with skills, responsibilities, and market standards.
  • Nightwing offers medical, vision and dental insurance coverage in addition to a 401k plan, PTO, Holidays, and additional insurances.
  • Nightwing is An Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status, age or any other federally protected class.

Qualifications

  • Must be a U.S. Citizen
  • Must have an active TS/SCI clearance
  • Must be able to obtain DHS Suitability
  • Ability to work with minimal supervision; establish priorities and delivery schedules amid uncertain timelines and set quality assurance criteria for all project deliverables
  • Candidates should have at least four years of experience producing analytic products (reports, briefings, or dashboards) based on real-world threats, incidents, or vulnerabilities
  • Experience assessing adversary campaigns, capabilities, motivations, and tactics, techniques, and procedures to produce operational and strategic intelligence products
  • Experience evaluating vulnerabilities, exposure, exploitability, and evidence of adversary use; assessing potential consequences for Federal Agencies and critical infrastructure
  • Experience correlating indicators of compromise, technical reports, and open source, commercial, and classified reporting to develop supported adversary assessments
  • Experience utilizing attack surface management tools or assessments from red teams
  • Demonstrated team leadership experience; including the ability to mentor and teach new analysts and develop training pipelines
  • Experience with directing cyber threat intelligence research into reports, presentations, and assessments for a variety of technology stacks
  • Experience in developing and delivering technical briefings to both cyber practitioners and SES leadership
  • Knowledge of system and application security threats and vulnerabilities; including how to mitigate the threats or vulnerabilities
  • Previous work with OT/ICS/SCADA technologies; primarily associated vulnerabilities and historic adversary threats to these systems
  • Experience in any capacity with critical infrastructure
  • Experience with ransomware actors; including interactions or monitoring of access brokers, dark web forums, or negotiations
  • Experience with emerging threats; including space systems, AI, and quantum computing
  • Ability to clean, normalize, enrich, and analyze large datasets with inconsistent formats and schemas; identify and support intelligence assessments from these large datasets
  • Administrative Applications (SharePoint, ServiceNow, Microsoft Teams Automation)
  • Commercial Threat Intelligence (Shodan, Censys, GTI, CrowdStrike)
  • Large Data Analytics and Analysis Applications (DataBricks, Power BI)
  • Threat Intelligence Platforms (Analyst1, OpenCTI)
  • Attack Surface Management (BitSight, Cortex Expanse)
  • BS Computer Science, Computer Engineering, Computer Information Systems, Cybersecurity, or related degree, or 10+ years experience in cyber incident management experience or cybersecurity experience with a High school diploma.
  • CISM, CISSP, GCTI, GCED, GOSI, CTIA, CySA+
  • Syndeo: ESS-3668
  • Salary & Benefits
  • The salary associated with this position ($122,000-$253,000) is commensurate with the selected candidate’s qualifications, years of relevant experience, and demonstrated level of expertise. Compensation will be determined based on these factors to ensure alignment with skills, responsibilities, and market standards.
  • Nightwing offers medical, vision and dental insurance coverage in addition to a 401k plan, PTO, Holidays, and additional insurances.
  • Nightwing is An Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status, age or any other federally protected class.

Apply for this job in 1 click

Skip the repetitive application forms

Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.

Sarah M.James T.Maya R.

Trusted by over 500,000 job seekers on Base Career

Start Free Today

More from this employer

More jobs at Nightwing

Sr Systems Integrator (OPT)

Sterling, USA

Discovered 2 days agoPart-time

Senior Cyber Security Consultant

, USA

Discovered 2 days agoFull-time

Software Engineer 3

, USA

Discovered 2 days agoFull-time

Linux Systems & Logistics Support Specialist (Junior)

, USA

Discovered 3 days agoFull-time

Senior Program Manager

, USA

Discovered 4 days agoFull-time

Mid-Level GEOINT Geospatial Analyst

, USA

Discovered 4 days agoFull-time

Principal Cyber Software Engineer (iOS)

Sterling, USA

Discovered 5 days agoFull-time

Junior Geospatial / Full-Motion Video (FMV) Analyst

, USA

Discovered 5 days agoFull-time