All-Source Analysis and Production Analyst

Mission Ops - Cyber - Annapolis Junction, MD - Full Time

The All-Source Analysis and Production Analyst shall provide support when performing the following:

• Provide all-source analysis to include research, evaluation, and deconfliction of single-source classified reporting, technical intrusion information, other agency all-source finished intelligence, open-source information and other relevant data.
• This analysis shall adhere to the Office of the Director of National Intelligence (ODNI) and Defense Intelligence Agency (DIA) all-source analytic tradecraft and standards.
• Maintain cognizance of events occurring both internal and external to the United States Government, including their networks and systems, to identify possible relationships, trends, and adversary Tactics, Techniques and Procedures to enhance knowledge base.
• Assist in the weekly production, editing, publishing, and dissemination of clear, concise, timely and relevant cyber analytic products to support DoWIN operations and DCO-IDM planning, integration, coordination, and execution.
• Assist in analyzing ongoing adversary threat activities and information targeting the DoWIN supporting the development of Joint Intelligence Preparation of the Operational Environment defined documents no more than twice a month, including production of cyber related Intelligence Estimates and course of action analysis.
• Assist in analyzing Information Assurance/Computer Network Defense activities on DoW systems and make recommendations for Department of War Cyber Defense Command (DCDC) defensive actions to protect the DoWIN. Analysis will evaluate operational information, intelligence assessments and reports, Computer Emergency Response Team, Law Enforcement/Counterintelligence, allied/coalition, and open-source information to assess potential impacts on the DoWIN and alert the DCDC Staff Leadership.
• Provide all-source analytical support to DoWIN Cyber Protection Teams' defensive missions
• Produce weekly special fusion reports and assessments related to specific incidents and trends concerning threats to the DoWIN using knowledge and taking advantage of web-based and network-based research tools to match potential threat candidates with the identified activity, produce reports and/or briefs, and make intelligence-derived recommendations to the J2/J3 for the defense of the affected network no more than twice a month.
• Conduct analysis to identify Indications and Warnings of potential or pending adversary activity, cyber developments, events or conditions that may adversely affect the DoWIN; advising leaders in order to proactively confront emerging challenges, leverage opportunities, avoid surprise and produce strategic outcomes favorable to the U.S. or allied interest.
• Respond to threat identification of activity directed against DoW systems.
• Evaluate global geopolitical and military international events weekly, from classified and open-source intelligence, and operational information to assist in the assessment of potential impacts to the DoWIN, alerting the DCDC Staff and Leadership to potential network exploitation or attacks.
• Assist in editing reports and report formats on a daily basis for content and clarity in support of intelligence reporting.
• Develop and present daily in-depth intelligence briefings and presentations concerning nation-state and non-state actor capabilities and activities, specific actor profiles, and incidents affecting DoW communications networks.
• Assist in the management of daily intelligence reports, assessments, and websites on the variety of classified networks used.
• Conduct coordination and collaboration activities and maintain communications with military and intelligence representatives within DCDC, Service components, other Combatant Commands, Department of Homeland Security, National Infrastructure Protection Center, NSA, Central Intelligence Agency, Defense Intelligence Agency, Joint Staff J2 Joint Chief of Staff (JCS), and DoWIN service providers.
• Produce weekly all-source intelligence assessments in support of vulnerabilities or concerns found from a Command Cyber Readiness Inspection and a Command Cyber Operational Readiness Inspection. This includes any battle damage assessments or technical analysis reports.
• Produce cyber intelligence assessments based upon Commercial Threat Intelligence Products used by DCDC.
• Assist in analyzing DoWIN network data activity, relevant computer logs, and computer systems to aid in identifying potential or pending adversary activity.

Required Skills:

• Must be a U.S. Citizen
• Must have TS/SCI clearance

Compensation Range: $110,000 - $125,000