Cyber Threat Intelligence Analyst

The role

You will support a federal agency's threat intelligence mission by identifying IOCs and tracking adversarial TTPs. You will produce threat intelligence products and assist the SOC to stay ahead of emerging threats to enterprise networks and systems.

What you will do

• Assist the SOC with identifying valid Indicators of Compromise (IOCs) and implementing appropriate monitoring, alerting, or blocking.
• Contribute to internal and external cyber threat intelligence products for distribution to Federal Partners.
• Compile cyber threat data on present and emerging adversarial tactics, techniques, and procedures through independent research.
• Assist in creating reports on key trends in cyber threat-related technology development affecting enterprise systems.
• Support Cyber Threat Hunt (CTH) by prioritizing threat actor TTPs based on recent intelligence reporting.
• Draft sections of Weekly Highlights and Weekly Activity Reports for senior analyst and lead review.
• Support historical tracking and trend reporting on phishing, malware, and scanning/probing activity.
• Assist with link analysis of technical data to identify patterns in targeting and attack timing.

Required qualifications

• One or More of the following certifications: CompTIA A+, Network+, Security+, GSEC, SSCP.
• A minimum of one (1) year professional experience in network or UNIX/Linux system administration, software engineering, or software development, and/or a bachelor's degree in a related field.
• A minimum of three (3) years of professional experience in incident detection and response and/or cyber threat intelligence analysis, and/or a bachelor's degree in Computer Science, Engineering, Infor

Nice to have

• Familiarity with commercial or open-source threat intelligence platforms (MISP, ThreatConnect, Recorded Future, or similar).
• Strong analytic writing skills and attention to source citation and confidence-level standards.
• Working knowledge of the MITRE ATT&CK framework.

Benefits

• hands-on experience
• certifications
• industry training

Before you apply

• Applicants for employment in the US must have work authorization that does not now or in the future require sponsorship of a visa for employment authorization in the United States.
• Candidates who are currently employed by a client of Accenture Federal Services or an affiliated Accenture business may not be eligible for consideration.

About the company

Accenture Federal Services is a technology company within global Accenture that helps the US federal government make the nation stronger and safer. Its 13,000+ people pursue the potential of technology for clients across defense, national security, public safety, civilian, and military health organizations.