Senior Threat Intelligence Analyst

Trellix is a global company redefining the future of cybersecurity. Trellix Threat Intelligence is a portfolio of solutions and services from our team of experts including our cybersecurity product team, Trellix Guardians Group, and our Advanced Research Centre (ARC). The Threat Intelligence Analyst will collaborate with customers to enhance their cyber threat intelligence capabilities by leveraging the experience, knowledge, tools, and data of the Trellix cyber defense enterprise. The role is responsible for delivering cyber threat intelligence services, which include knowledge of sophisticated threat actors and associated tactics, techniques, and procedures, along with research, collection, analysis, and reporting of finished intelligence. The role will support customer security operations including planning and risk assessment, vulnerability assessment, 24x7x365 monitoring, and incident response. This is an on-site role at a customer facility at Fort Belvoir in Virginia. As a member of the Guardians, the Analyst will collaborate with Guardian teammates, members of the ARC, Trellix Professional Services Consultants, and third-party partners. The analyst will serve as a primary customer interface and will become immersed in customer operations through rapid learning and establishing relationships. This is a resident analyst role supporting a customer in a full-time capacity.

Responsibilities

Collaborate with customers to enhance their cyber threat intelligence capabilities by leveraging the experience, knowledge, tools, and data of the Trellix cyber defense enterprise; Deliver cyber threat intelligence services including knowledge of sophisticated threat actors and associated tactics, techniques, and procedures, along with research, collection, analysis, and reporting of finished intelligence; Support customer security operations including planning and risk assessment, vulnerability assessment, 24x7x365 monitoring, and incident response; Serve as a cyber threat intelligence subject matter expert and trusted advisor; Integrate with customers' operations-intelligence cycles; Collaborate with Trellix employees, customers, and third parties to support defense of the customer's network and mission elements; Develop information/intelligence requirements and establish associated priorities; Identify intelligence gaps and uncover opportunities to improve intelligence sharing and utility; Create tailored strategies for research, data collection, analysis, and reporting focused on customers' areas of interest; Draft comprehensive responses to customer requests for information/intelligence (RFIs); Perform all-source research and analysis using Trellix tools, data sets, third-party tools, and open sources; Produce high-quality written and oral reporting, including active participation in peer review and quality assurance; Map relationships between malicious cyber activity and global events, such as geopolitical shifts, natural disasters, or crises; Deliver expert threat intelligence presentations to diverse customer teams, ranging from technical staff to senior executives; Maintain an up-to-the-minute understanding of the cyber threat landscape, including APTs, motivations, attack vectors, and TTPs; Serve as primary customer interface and become immersed in customer operations through rapid learning and establishing relationships

Requirements

Self-motivation and genuine passion for cybersecurity; Keen interest in tracking threat actors; Strong proficiency in structured analytical techniques including Quality of Information Checks, ACH, Key Assumptions Checks, and Gap Analysis; Critical thinking skills to remain objective and avoid analytical biases; Ability to produce clear, complete, and concise reporting under tight deadlines with extreme attention to detail; Deep understanding of cyber threats, attack vectors, detection capabilities, and countermeasures; Experience with open-source intelligence (OSINT) collection methods and tools; Background working within a Security Operations Center (SOC) to monitor, respond to, and remediate detected issues; Clear grasp of organizational Incident Management processes as they relate to threats and vulnerabilities; Technical knowledge of XDR/EDR, Endpoint Security tools (AV, whitelisting, etc.), and Threat Hunting; High-level comprehension of malware types, detection methods, and analysis techniques; Familiarity with industry frameworks such as MITRE ATT&CK and D3FEND, the Cyber Kill Chain, and the Diamond Model; Proven track record of identifying and mitigating cyber threats using various detection strategies; Solid understanding of technical vulnerabilities and associated risks; Hands-on experience with SIEM tools and collaborating closely with SIEM Analysts on event correlation and analysis; 5+ years of intelligence gathering, analysis, and reporting experience; 8140 IAT III and 8140 IASAE II certifications required or willingness to obtain them; Active Top Secret SCI clearance

Nice to have

Bachelor's degree in information security, cyber discipline, political science or a related analytical field (considered an asset)

Benefits

Social programs; Flexible work hours; Family-friendly benefits; Retirement Plans; Medical, Dental and Vision Coverage; Paid Time Off; Paid Parental Leave; Support for Community Involvement