Intrusion Analyst 3

Gormat is looking for an Intrusion Analyst to discover, analyze, and document malicious or unauthorized activity using information collected from a variety of SIGINT and computer network defense resources. You will analyze metadata collected from tasked communications systems in order to identify, locate, and track targets, and to accurately report the intelligence gained from metadata analysis. You will categorize traffic as benign, suspicious, or malicious activity; and document malicious tactics, techniques, and procedures (TTPs). You will also develop and implement mitigation strategies. The ideal candidate will have a network and/or host-based focus.

The Intrusion Analyst shall possess the following capabilities:

• Relevant experience must be in malware analysis
• Programming experience in C, C#, C++, Java, Perl, or Python is preferred.
• CISSP, GIAC GREM or CREA Certification is preferred for level 1.
• Supporting CSD; deep understanding of cyber threat intelligence, preferably against hard targets like state-sponsored APTs. Strong skills using customer toolset and depth of experience leveraging the sigint system for technical data.

Qualifications:

Level 1:

• Bachelor's Degree with 2 years of relevant experience.
• Associates degree with 4 years of relevant experience.

Level 2:

• Master's Degree with 3 years of relevant experience.
• Bachelor's Degree with 5 years of relevant experience.
• Associates degree with 7 years of relevant experience.

Level 3:

• Doctoral degree plus 4 years of relevant experience
• Master's degree with 6 years of relevant experience
• Bachelor's Degree with 8 years of relevant experience
• Associates degree with 10 years of relevant experience

Level 4:

• Doctoral degree plus 7 years of relevant experience
• Master's degree with 9 years of relevant experience
• Bachelor's Degree with 11 years of relevant experience
• Associates degree with 13 years of relevant experience

All Levels:

• Bachelor's Degree in Computer Science, Computer Engineering, Information Systems, or related discipline from accredited college or university.

Certifications Required:

• CISSP, CEH, Sec+, Net+, GIAC GREM and/or CREA Certification is required for Level 2 and 3

TS/SCI with polygraph is required.