Cyber Threat Analyst

Full Time
Daegu, South Korea
Industry: Management Consulting
Areas of Interest: Test and Evaluation, Threat Analysis, Vulnerability Assessment and Management
report a problem
Overview


EMPOWERING YOU TO CHANGE THE WORLD

 

Support DoD Cybersecurity operations through the analysis of event data and other data sources for indicators of attack and potential network compromise, produce reports, and assist with defensive incident response of Cyberspace operations. Provide technical assessments, strategy, and execution recommendations for Enterprise–level networks within the Army infrastructure. Identify relevant Cyber threats within client environments through real time analysis of logs and alerts or data, including data IDS/IPS, firewall, and proxy logs files. Apply knowledge of computer and network architecture to provide analysis during investigations, identifying adversarial activity and methods for future detection and prevention. Use a combination of Open Source research of exploits or vulnerabilities, including Zero–Day, network flow, log review, event correlation, and PCAP analysis to complete investigations. Operate intrusion detection or prevention systems and other point of presence security tools. Develop comprehensive security write–ups which describe security issues, analysis, and remediation techniques to client leadership.

 

Basic Qualifications:

  • Experience with collecting, analyzing, and interpreting qualitative and quantitative data from multiple sources for the purposes of documenting results and analyzing findings to provide meaningful products
  • Ability to monitor and analyze logs and alerts from a variety of different technologies, including IDS/IPS, firewall, proxies, and anti–virus across multiple platforms
  • Ability to develop specific expertise, discern patterns of complex threat actor behavior, and communicate a comprehension of current and developing Cyber threats
  • Ability to leverage online research tools to identify and navigate online forums, specialized Web sites, social media, and traditional sources
  • Ability to coordinate and respond to events on all the monitored networks and the systems on those networks
  • TS/SCI clearance
  • DoD 8570 IAT Level III Certification and CEH

Additional Qualifications:

  • Experience with Cybersecurity analysis, incident response, or a related field
  • Experience with leveraging all source intelligence analysis
  • Experience with HBSS, Splunk, or ArcSight
  • Possession of excellent oral and written communication skills in a professional consulting environment
  • BA or BS degree in Information Security, CS, or Cyber Security

Clearance:

Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; TS/SCI clearance is required.

 

Integrating a full range of consulting capabilities, Booz Allen is the one firm that helps clients solve their toughest problems. by their side to help them achieve their missions. Booz Allen is committed to delivering results that endure.

 

We are proud of our diverse environment, EOE, M/F/Disability/Vet.




Share this job:

Booz Allen Hamilton

Your Essential Partner
Booz Allen Hamilton has been at the forefront of strategy and technology for more than 100 years Today, the firm provides management and technology consulting and engineering services to leading Fortune 500 corporations, governments, and not-for-profits across the globe. Booz Allen partners with public and private sector clients to solve their most difficult challenges through a combination of consulting, analytics, mission operations, technology, systems delivery, cybersecurity, engineering and innovation expertise.
Visit Booz Allen Hamilton's Social Media pages:
Company Industry: Management Consulting
Company Type: Public Company
Company Size: 10,001+