Threat Intelligence Analyst [JOB ID 20260923] at Hjem in Washington, DC

Job description

• Phoenix Cyber is looking for a Threat Intelligence Analyst, with Operational Technology (OT) focus, to join our client delivery team.
• Job Description:

Responsibilities

• Collects, reviews, and identifies cybersecurity threat intelligence from open source and intelligence reporting to analyze and provide actionable threat reporting and briefings for cybersecurity analysts.
• Provides support to content developers and cybersecurity engineers in identifying gaps in protection and detection of systems.
• Reviews log and network events and alerts related to systems for signs of attack or Advanced Persistent Threats.
• Performs root cause analysis and supports remediation efforts for incidents related to Operational Technology cybersecurity incidents.
• Acts as the Subject Matter Expert on OT cybersecurity related issues.

Requirements

• Minimum 6 years of relevant IT experience
• Minimum 2 years of hands-on experience analyzing, securing, or threat-modeling Operational Technology (OT), Industrial Control Systems (ICS), or SCADA environments (Experience limited to enterprise IT security will not satisfy this requirement.)
• Working understanding of common industrial communication protocols and lower-level control architecture.
• Demonstrated experience applying ATT&CK for ICS, SPARTA, or Cyber Kill Chain for ICS to dissect adversary campaigns and analyze cyber-physical attack paths.
• Understanding of the NIST Framework
• Understanding of threats and vulnerabilities in OT environments.
• Must have an active Top Secret Security Clearance

Skills

Required

• Threat intelligence analysis
• Operational Technology (OT) security
• SCADA security
• Threat modeling
• Root cause analysis
• Incident remediation
• Applying ATT&CK for ICS
• Applying SPARTA
• Applying Cyber Kill Chain for ICS
• Understanding of NIST Framework
• Active Top Secret Security Clearance