Requirements
Security Clearance
Secret Clearance
Project Overview
The Threat Lead’s overall goal is to maintain awareness of, curate, and triage current threats the CIRT should proactively monitor for and respond to. Sources for information would be open source, classified, and via liaison with internal threat intel teams.
Daily Responsibilities
- Continuously internally evangelize and promote how and why threat information should be and is important in driving CIRT actions
- An excellent verbal communication, reporting and presentation skills is a must. Create short situation reports as required.
- Maintain and regularly update an MS Teams channel dedicated to CIRT/Department of State related Threat intelligence.
- Assist with developing training opportunities for junior analysts.
- Identifies and creates training requirements/opportunities for Tier 1 and 2 members.
- Mentor Jr and Mid staff members by creating and teaching latest techniques
- Supporting / Mentor analysts on new techniques and information sources.
- Although the position does not currently have any direct reports, the Threat Lead will be part of the CIRT upper Management team. As such, the position should have a good understanding of how a CIRT functions, and the technologies involved so that they can be leaned on to help move the CIRT forward.
Required Qualifications
- Minimum Five (5) years of experience in years of experience in information security, information technology, Cyber Security, or related field;
- A working-level proficiency in Splunk, Fireeye, or other enterprise-level data aggregation tools (the ability to execute basic queries, create reports and dashboards);
- A working-level proficiency in IDS (Intrusion Detection Software)
- Experience managing or mentoring a team
- Hands on experience with cyber threat
- Hands on experience in a leadership role
- Active Secret Clearance
- Bachelor’s Degree or equivalent years of experience in a relevant field (e.g. Cybersecurity, Information Technology, or Computer Science);
Certifications- Preferred Requirements
- CISSP
- SANS GREM
- SANS GCIH and/or GCIA
- Certified Ethical Hacker
- Basic knowledge of Java, C, and/or C++