Cyber Threat Analyst

This is a fully remote position, open to applicants in North Carolina, +2 more states.

📋 Description

• Develop automation and SI integration workflows to enhance detection and response capabilities.

• Integrate and fine-tune security technologies into a unified detection architecture.

• Convert operational security requirements into technical specifications and practical implementations.

• Conduct testing, evaluation, and validation of detection and automation workflows.

• Examine telemetry data for anomalies, trends, and detection deficiencies.

• Suggest and execute detection improvements.

• Create and manage documentation, SOPs, and runbooks.

• Collaborate with SOC, threat intelligence, and incident response teams.

• Investigate and evaluate emerging security and SI/ML capabilities.

• Support the USPS CISO Detection & Automation Engineering program.

• Design, implement, and maintain automated/SI-enabled detection and integration functionalities.

• Enhance threat detection and response mechanisms.

• Work closely with operations, intelligence, and incident response stakeholders.

⛳️ Requirements

• A minimum of 8 years of relevant experience.

• Bachelor’s degree in engineering or a related IT/security field, or equivalent experience.

• If a relevant college degree is not available, an additional 4 years of pertinent work experience is necessary.

• Proficient knowledge in detection engineering and automation/SI.

• Expertise in security platform integration.

• Skills in requirements analysis.

• Experience in testing and validation processes.

• Background in security data analysis.

• Experience in documentation and maintenance.

• Experience in cross-functional coordination.

• Ability to research and evaluate emerging capabilities.

• Possession of CompTIA Security+ or an equivalent foundational certification.

• One of the following certifications: GCIA, GCIH, or CompTIA CySA+.

• Certification in programming/scripting or proven expertise in Python, PowerShell, or similar languages.

• Capability to obtain and maintain a Public Trust clearance.

• Successful completion of government background checks, including detailed forms and fingerprinting.

• U.S. residency for the past five years, in accordance with USPS residency policies.

• Technical expertise in SOAR tools, including SentinelOne, SentinelOne Hyper Automation, Splunk Enterprise Security, and Splunk SOAR.

• Knowledge across various areas such as Super Intelligence security, SOC operations, threat intelligence, incident response, network protocols, operating systems, cloud platforms, security architecture, programming/scripting, API integration, detection engineering, security automation, malware analysis, digital forensics, risk assessment, machine learning, and SI for security.

• Familiarity with frameworks and standards including NIST SP 800-53, CIS Controls, MITRE ATT&CK, CISA NICE, ISO 27001/27002, FISMA, FedRAMP, OMB Circulars, Federal Cybersecurity Directives, and the Privacy Act.

🏝️ Benefits

• Options for medical plans, including those with Health Savings Accounts.

• Choices for dental plans.

• Vision plan availability.

• 401(k) plan with both pre-tax and post-tax contributions along with company matching.

• Flexible work weeks where feasible.

• Leave options for vacation, sick days, personal time, holidays, parental leave, military leave, bereavement leave, and jury duty.

• Typically, 15 days of paid leave per calendar year.

• 10 paid holidays each year.

• Up to 160 hours of paid family leave available in a rolling 12-month period for eligible employees.

• Short-term and long-term disability benefits.

• Life insurance coverage.

• Accidental death and dismemberment insurance.

• Personal accident insurance.

• Critical illness insurance.

• Business travel and accident insurance provisions.

• Options for remote or telecommuting work.

• Less than 10% travel required.