Intel Analyst

Are you interested in being part of a highly collaborative Cybersecurity Hunt Team?
 
Are you inquisitive and analytical with a Cybersecurity focus?
 
We are ranked as one of Computerworld 's Top Places to Work in IT 5 years running and w e are seeking a Cybersecurity Hunt Analyst to help us hunt for sophisticated cyber threats operating in an actively changing cyber threat landscape. Collect evidence to include digital media, logs, and malware to perform analysis associated with cyber intrusions. Identify and analyze threats, using OSINT, Threat Intelligence and enrichment resources.
 
As a Cybersecurity Hunt Analyst, y our main responsibility will be to proactively hunt, monitor, analyze, and respond to infrastructure threats, contribute to Computer Network Defense, and create solutions to augment Defensive Cyber Operations at APL.
 
Develop and enhance content and methods for monitoring and incident response, using data extraction for further analysis.
Determine high fidelity behavioral patterns and create content in multiple tools.
Participate in project and multi-functional security teams requiring interaction with system administrators, networking staff, application developers, IT operations staff, and cyber research and development areas within the organization in order to identify and implement information assurance controls and make risk mitigation recommendations for IT operations.

Possess a Bachelor's Degree in Information Security, a security related field, or equivalent experience that provides the necessary knowledge, skill and abilities.
Have 7 or more years of experience working in a complex network environment
Have a proficient understanding of Linux operating systems (focus RHEL and Ubuntu), OS normal activities, OS internals, MITRE ATT&CK TTPs mapped to Linux systems, and identifying anomalous behaviors on Linux systems; and proficiency with extracting and manipulating data, using scripting languages such as Python, PowerShell, SPL or others.
Have an understanding of operating systems normal activities and OS internals (Windows and Mac).
Are able to demonstrate ambition to further current knowledge and understanding by exploring new concepts and applying to cyber security.
Have experience analyzing and base-lining data with technologies like Splunk, ELK, Hadoop, or SQL.
Are flexible to work outside of normal business hours, to include some overnight and/or weekend work, in support of incident response and project implementation tasks.
Are able to obtain Secret level security clearance. If selected, you will be subject to a government security clearance investigation and must meet the requirements for access to classified information. Possess a Master 's Degree in Information Security Assurance or security related field
Can develop and enhance content and methods for monitoring and incident response
Have experience with memory analysis, host-based anomaly detection, network anomaly detection, and authentication anomaly detection.
Our employees enjoy generous benefits, including a robust education assistance program, unparalleled retirement contributions, and a healthy work/life balance. All qualified applicants will receive consideration for employment without regard to race, creed, color, religion, sex, gender identity or expression, sexual orientation, national origin, age, physical or mental disability, genetic information, veteran status, occupation, marital or familial status, political opinion, personal appearance, or any other characteristic protected by applicable law.
APL is committed to promoting an innovative environment that embraces diversity, encourages creativity, and supports inclusion of new ideas. In doing so, we are committed to providing reasonable accommodation to individuals of all abilities, including those with disabilities.