Bachelor’s degree (STEM/Business Admin) and a minimum of 5 years of cyber threat analysis and intelligence experience; or an associate’s degree and a minimum of 7 years specialized experience; or 11 years of experience (no degree)
- Must meet TESA Qualifications
DoW 8140 - Cybersecurity (Cyber Defense Analyst) - Advanced
Certifications - must hold active certifications (one of the following):
- GNFA (GIAC Network Forensic Analyst)
- GCIH (GIAC Certified Incident Handler)
- GCTI (GIAC Cyber Threat Intelligence)
- GDSA (GIAC Defensible Security Architecture)
- GCDA (GIAC Certified Detection Analyst)
- GREM (GIAC Reverse Engineering Malware)
- Blue Team Level 2
- Microsoft Certified: Cybersecurity Architect Expert
- Zero Point RTO
- OSDA (Offensive Security Operations and Defensive Analysis)
Demonstrated experience in threat analysis of vulnerabilities and penetration techniques; expert knowledge of network logs (firewall, PCAP, NetFlow, Zeek, DNS, web proxy); alert and activity correlation; network diagram review; RAM/system dump analysis; and cyber threat awareness product development
U.S. citizenship required
Active DoW TS/SCI security clearance

Preferred:

Expert proficiency with Zeek/Bro for network security monitoring and custom script development for traffic analysis
Experience with NetFlow analysis tools (SiLK, nfdump, Elastic) for large-scale network behavior analysis and anomaly detection
Advanced Wireshark skills for deep packet inspection and protocol-level adversary activity reconstruction
Strong working knowledge of the MITRE ATT&CK framework for threat modeling, TTP mapping, and detection gap identification
Experience with threat intelligence platforms (MISP, OpenCTI, Anomali) for IOC management and intelligence sharing
Proficiency with Elastic Stack or Splunk for log aggregation, correlation, and threat hunting query development
Experience with memory forensics tools (Volatility, Rekall) for RAM dump analysis and malware artifact extraction
Familiarity with structured analytic techniques and intelligence community reporting standards for finished product development

Job ID

165842

Security Clearance

TS/SCI

About Peraton

At Peraton, we’re at the forefront of delivering the next big thing every day. We’re the partner of choice to help solve some of the world’s most daunting challenges, delivering bold, new solutions to keep people around the world safer and more secure.

We’re not mired in the past. We look at all problems with fresh eyes. We look past the obvious to bring the best talent, tech, and ideas together to completely transform how things get done, no matter the challenge.

Company Profile