Lead Cyber Threat Intelligence Analyst

Gunnison is hiring a Lead Cyber Threat Intelligence Analyst to support Federal Student Aid. The role leads cyber threat-intelligence and incident-response activities, investigates intrusions, supports computer forensics and data recovery, and coordinates intelligence production and response with senior authorities.

Responsibilities:

• Lead the collection, evaluation, analysis, production, and dissemination of cyber threat intelligence
• Provide expert knowledge of threat intelligence, cybersecurity defense, computer and network vulnerabilities, data hiding, encryption, tools, techniques, trends, and countermeasures
• Identify, deter, monitor, and investigate computer and network intrusions
• Provide computer-forensic support to high-technology investigations, including evidence seizure support, forensic analysis, and data recovery
• Conduct incident response in accordance with Department breach-response processes
• Lead threat-intelligence and incident-response activities and coordinate with senior authorities as necessary
• Develop intelligence requirements aligned with organizational missions, systems, data, threat exposure, and leadership priorities
• Analyze threat actors, campaigns, malware, infrastructure, tactics, techniques, procedures, vulnerabilities, and emerging risks
• Translate intelligence into detection use cases, hunt hypotheses, incident-response priorities, vulnerability priorities, risk updates, advisories, and executive briefings
• Provide technical and management leadership, direct intelligence personnel, maintain analytic quality, and brief client and senior-management stakeholders

Requirements:

• U.S. citizenship is required
• More than 10 years of experience in the subject area
• Bachelor's degree
• Senior industry professional certification such as Certified Information Systems Security Professional (CISSP) or equivalent
• Demonstrated domain expertise and technical or management leadership on major tasks or technology assignments
• Experience establishing goals and plans that meet project objectives and directing activities to ensure technical requirements are met
• Experience interacting with clients, conducting negotiations, and interfacing with senior management
• Ability to obtain and maintain a High Risk Public Trust suitability determination
• Must be eligible for employment in the United States
• We are unable to sponsor candidates at this time
• Experience with MITRE ATT&CK, structured analytic techniques, intelligence requirements, threat-intelligence platforms, indicator management, and executive briefings
• Experience supporting federal agencies, financial services, education, critical infrastructure, or other highly regulated environments
• Experience translating intelligence into detections, hunt plans, incident-response actions, vulnerability priorities, and risk decisions
• Advanced certifications such as GCTI, GCIA, GCIH, or equivalent