Cyber Threat Intelligence Analyst (Remote)

The following position is to join our Enterprise Services team:

Role Overview:

RTX Cyber Defense is seeking a dynamic individual contributor to join our Cyber Threat Intelligence team in the role of Cyber Threat Intelligence Analyst. The successful candidate will need to be able to work in a fast-paced environment performing deep dive analysis of network and host-based indicators. A deep understanding of current APT actors and TTPs as well as experience performing question driven analysis is required.

What You Will Do:

• Analyze large and/or unstructured data sets to identify trends and anomalies indicative of malicious activity.
• Perform deep dive analysis of indicators associated with intrusions and other cyber threat activity supported by industry-accepted threat intelligence analytical frameworks, tools, and standards.
• Work closely with RTX stakeholders and foster collaborative relationships between Threat Intelligence and its various customers across the enterprise.
• Collaborate with other cyber defense teams to conduct tailored assessments in support of ongoing investigations, threat hunts, and analysis of detection & mitigation controls.
• Continuously strengthen intelligence gathering and investigation processes and procedures.
• Interact with executives and other stakeholders on technical requirements, intelligence briefings, and requests for information.
• Produce finished intelligence reports in response to client requests for information.

Qualifications You Must Have:

• Typically requires a University Degree or equivalent experience and a minimum 8 years of experience, or an Advanced Degree and a minimum 5 years experience.
• 5+ years of technical Cyber Threat Intelligence experience in either an analytic or operational capacity. Specifically, experience working with customers and ensuring the program has the people, process, and technology required to meet their technical intelligence needs.
• 4+ years operationalizing the Cyber Kill Chain, MITRE ATT&CK, and Diamond Model.
• The ability to obtain and maintain a U.S. government issued security clearance is required. U.S. citizenship is required, as only U.S. citizens are eligible for a security clearance.
• Ability to travel 10% of time.

Qualifications We Prefer:

• Well-developed research skills using internet open source and proprietary sources.
• Experience delivering polished written and oral briefings on complex cyber topics with little-to-no notice.
• Should have journeyman to expert analytic competencies - graduates of government-provided career analyst certifications and/or operational tradecraft certifications that include an analytic component will be considered highly competitive.
• Sound understanding of network protocols, security tools, and cyber technologies, including but not limited to SIEM, EDR, full packet capture, and SOAR.
• Strong ability to manage indicators of compromise and enrich them through premium and open-source tooling.
• Demonstrated ability to form coalitions amongst disparate groups, be able to produce thorough and precise documentation, and have sound decision making skills.
• Scripting skills desired but not required.
• Certifications desired but not required: CISSP, CISM, CEH, Security+, CCNA or greater, SANS certifications.

What We Offer: Whether you're just starting out on your career journey or are an experienced professional, we offer a robust total rewards package with compensation; healthcare, wellness, retirement and work/life benefits; career development and recognition programs. Some of the benefits we offer include parental (including paternal) leave, flexible work schedules, achievement awards, educational assistance and child/adult backup care.

Learn More & Apply Now!
Work Location: Remote
Please consider the following role type definition as you apply for this role:

Remote: This position is currently designated as remote. However, the successful candidate will be required to work from one of the 50 U.S. states (excluding U.S. Territories). Employees who are working in Remote roles will work primarily offsite (from home). An employee may be expected to travel to the site location as needed.

The salary range for this role is 101,000 USD - 203,000 USD. The salary range provided is a good faith estimate representative of all experience levels. RTX considers several factors when extending an offer, including but not limited to, the role, function and associated responsibilities, a candidate's work experience, location, education/training, and key skills.

Hired applicants may be eligible for benefits, including but not limited to, medical, dental, vision, life insurance, short-term disability, long-term disability, 401(k) match, flexible spending accounts, flexible work schedules, employee assistance program, Employee Scholar Program, parental leave, paid time off, and holidays. Specific benefits are dependent upon the specific business unit as well as whether or not the position is covered by a collective-bargaining agreement.

Hired applicants may be eligible for annual short-term and/or long-term incentive compensation programs depending on the level of the position and whether or not it is covered by a collective-bargaining agreement. Payments under these annual programs are not guaranteed and are dependent upon a variety of factors including, but not limited to, individual performance, business unit performance, and/or the company's performance.

This role is a U.S.-based role. If the successful candidate resides in a U.S. territory, the appropriate pay structure and benefits will apply.

RTX anticipates the application window closing approximately 40 days from the date the notice was posted. However, factors such as candidate flow and business necessity may require RTX to shorten or extend the application window.

RTX is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability or veteran status, or any other applicable state or federal protected class. RTX provides affirmative action in employment for qualified Individuals with a Disability and Protected Veterans in compliance with Section 503 of the Rehabilitation Act and the Vietnam Era Veterans' Readjustment Assistance Act.

Privacy Policy and Terms:

Click on this link to read the Policy and Terms