Emerging Threats Analyst

TEKsystems
$40.00 - $50.00 / hr
life insurance, sick time, 401(k), retirement plan
United States, Texas, San Antonio
May 29, 2025
Description This position requires an active DoD Clearance (Secret, Top Secret, Top Secret/SCI) or the ability to be obtain an (Interim Secret, Interim Top Secret), Because an active or interim DoD clearance is required, U.S. Citizenship is required. Must have active TS/SCI clearance. If you do not hold this level clearance, your application will not be considered. Must have or be able to obtain GCFA or GCTI within 120 days of employment. Analyze current and historical traffic entering the Air Force network using ArcSight (SIEM technology), Centaur, Noesis, Splunk, ELK, Fidelis, Solera, Niksun, Wireshark and other available tools (commercial and government provided), including OSINT and other classified reporting databases. Determine if the network traffic requires further investigation of the Air Force asset(s) in question. Correlate various data points using historical network traffic, operational events, reporting patterns, and other data to discern anomalies, patterns, or trends. Perform post intrusion correlation to ensure current incidents are contained and have not spread to other Air Force Bases, networks or enclaves. Provide tipper information to other organizations when required. Collect weekly and monthly metrics (or as required) and trend information for organizational reports (as required) and long-term analysis. Continuously review (24/7/365) NCTOC reports, Tippers, SIGACTS, emails and other self-reported problems and events. Conduct research and gather threat intelligence on advanced threat actors. Conduct Data Analysis for mission discovery of cyber threats and conduct characterization and attribution of those threats. Identify cyber threats, trends, and new developments on various cyber security topics by analyzing raw intelligence and data which includes geopolitical and transnational events. Present results to analysts and operators and train them how to recognize changes in operational environment likely to cause mission success or failure. Create visual displays conveying situational awareness and engagement effectiveness assessments to the operational crews. (CDRL A008) Analyze current all-source intelligence from applicable intelligence community sources concerning adversary telecommunication and computer network systems supporting adversary C4I processes. Provide analytical reports and state findings or integrate conclusions into overall squadron generated composite reports, briefings, and target profile folders. Provide analytic tradecraft to gathered intelligence in a consistent manner. Develop and refine cyber threat intelligence collection and analysis processes. Assist crews and analysts to determine most efficient means of execution (course of action) against malware, adversary TTPs, threat actors and the MITRE attack framework with respect to AFCERT weapons. Write technical operational reports associated with systems that extensively involve telecommunications and telecommunications interfaces, IT, computer network defense (CND), computer networking, and network security. (CDRL A002) Make analytical predictions about cyber actors and their future activities based on available data. Recognize threats by performing relevant research and data analysis using both internal and external tools and resources. Produce detailed intelligence analysis reports on cyber threats with a potential to impact AF networks, systems and enclaves. (CDRL A008) Present relevant findings to both technical and non-technical audiences. Provide OJT to other contractor employees, military, and/or civilian personnel, and ensure continuity folders/working aids are updated at least once per quarter in order to ensure efficient transition when personnel rotates. Skills cyber security, security, penetration testing, analysis, incident response, system analysis, tcp/ip, vulnerability assessment Top Skills Details cyber security,security,penetration testing,analysis,incident response,system analysis,tcp/ip,vulnerability assessment Additional Skills & Qualifications Requirements: DoDD 8570.01-M/8140.01 I AT Level II CND Active TS/SCI Formal intelligence analysis training and government experience. BA/BS or MA/MS. Previous experience working with hunting tools and technologies. Understanding of Networking (including the OSI Model, TCP/IP, DNS, HTTP, SMTP). Experience with open source Malware Analysis platforms (Assemblyline, Cuckoo, Malboxes). Experience with one or more commercial Malware Analysis platforms (Joe Sandbox, VirusTotal, etc.) knowledge of MITRE ATT&CK framework, and its uses within the cybersecurity community (e.g., Open Source projects) Pay and Benefits The pay range for this position is $40.00 - $50.00/hr. Eligibility requirements apply to some benefits and may depend on your job classification and length of employment. Benefits are subject to change and may be subject to specific elections, plan, or program terms. If eligible, the benefits available for this temporary role may include the following: * Medical, dental & vision * Critical Illness, Accident, and Hospital * 401(k) Retirement Plan - Pre-tax and Roth post-tax contributions available * Life Insurance (Voluntary Life & AD&D for the employee and dependents) * Short and long-term disability * Health Spending Account (HSA) * Transportation benefits * Employee Assistance Program * Time Off/Leave (PTO, Vacation or Sick Leave) Workplace Type This is a fully onsite position in SAN ANTONIO,TX. Application Deadline This position is anticipated to close on Jun 6, 2025. About TEKsystems and TEKsystems Global Services We're a leading provider of business and technology services. We accelerate business transformation for our customers. Our expertise in strategy, design, execution and operations unlocks business value through a range of solutions. We're a team of 80,000 strong, working with over 6,000 customers, including 80% of the Fortune 500 across North America, Europe and Asia, who partner with us for our scale, full-stack capabilities and speed. We're strategic thinkers, hands-on collaborators, helping customers capitalize on change and master the momentum of technology. We're building tomorrow by delivering business outcomes and making positive impacts in our global communities. TEKsystems and TEKsystems Global Services are Allegis Group companies. Learn more at TEKsystems.com. The company is an equal opportunity employer and will consider all applications without regard to race, sex, age, color, religion, national origin, veteran status, disability, sexual orientation, gender identity, genetic information or any characteristic protected by law.