Threat Intelligence Specialist

• Control Risks is looking to hire a Security Intelligence Analyst to support a premier client of ours.
• The Security Intelligence Analyst will be a key member of the Global Security Intelligence team as they collect, curate, and disseminate current and forecasted risk intelligence in a timely manner to partners and stakeholders.
• This position will also work to edit and compile written analysis by the Junior Analysts.
• Monitor and analyze geopolitical and global events identify and assess threats to the client’s specific global operations, assets, and personnel.
• Provide major event safety and security assessments, forecasts, and vulnerability reports.
• Oversee production of analysis by the Junior Analysts on the team.
• Conduct site and travel vulnerability assessments to ensure the safety of the client’s employees and locations.
• Support location-specific intelligence, including active and archived alerts; city and country intelligence; and interactive maps.
• Drafting comprehensive, well-researched, and articulate analysis products providing tailored research for client-specific needs.
• Define priorities for in-depth analysis of selected locations relevant to the client’s global interests.
• Lead production of specific briefings or presentations.
• Other responsibilities may develop with program growth

Security Intelligence Analyst

Security Analyst

• Lead enterprise RMF and ATO activities for federal information systems
• Develop and maintain SSPs, SARs, POA&Ms, RTMs, ISCPs, CMPs, and related security documentation
• Conduct system categorization, control selection, implementation validation, and control assessments
• Support rapid ATO initiatives and ongoing authorization activities
• Perform security assessments for cloud, hybrid, on-premises, and classified systems
• Coordinate directly with Authorizing Officials (AOs), ISSOs, engineers, and program leadership
• Utilize JCAM and related DOJ cybersecurity tools to manage authorization packages
• Conduct risk analysis and provide remediation recommendations
• Support FISMA, FISCAM, and continuous monitoring initiatives
• Provide technical leadership for vulnerability remediation and security compliance activities

Lead ATO Subject Matter Expert – Cybersecurity Analyst III

• Support full lifecycle RMF and ATO activities
• Develop SSPs, SARs, POA&Ms, Security Assessment Plans, and related artifacts
• Conduct system categorization and security control assessments
• Support continuous monitoring and compliance initiatives
• Coordinate with ISSOs, engineers, developers, and federal stakeholders
• Assist with vulnerability remediation and audit support activities
• Maintain authorization documentation within JCAM

Senior ATO Subject Matter Expert, Cybersecurity Analyst III

Incident Response Analyst

• Utilize security tools to analyze, investigate, and triage security alerts
• Monitor our customers environments, including cloud and SaaS solutions for evidence of adversarial activity
• Perform in-depth analysis and investigation of high-priority cybersecurity incidents
• Utilize advanced tools, such as host based digital forensics or malware analysis capabilities, to identify incidents’ root causes, scope, and impact
• Collaborate with cyber threat hunting and cyber threat intelligence teams
• Participate in the development, implementation, and tuning of the SOC tools detection content and alerting signatures
• Accurately document triage findings
• Learn new open and closed-source investigative techniques
• Perform research into emerging threats and vulnerabilities to aid their prevention and mitigation
• Help shape the evolution of processes and procedures of the SOC
• Provide guidance and mentorship to Tier 1 SOC Analysts to enhance their skills and capabilities

Part-Time Tier 2 Incident Response Analyst – Weekend Nights

• Monitor threats against Cisco executives and personnel via vendor intelligence feeds, law enforcement reports, and OSINT research, triaging and escalating based on an established risk matrix
• Produce and deliver risk assessments and recommendations ahead of executive travel and perform active monitoring of intelligence feeds to mitigate travel disruptions and risks
• Conduct security investigations and maintain awareness of persons of interest (POIs) and potential hostile actors
• Draft recurring reports analyzing internal threat metrics, emerging security TTPs, and geopolitical, cyber, and physical threats that may impact leadership, assets, or operations
• Contribute to ad-hoc advisories, presentations, and projects on executive security, internal risk, and travel risk management, collaborating with STO Global Security, Executive Protection teams, and partners
• Coordinate with Cisco vendors, internal stakeholders, and public/private partners to refine tooling, configure intelligence feeds, and liaise on risk concerns
• Provide on-site or remote intelligence support for corporate events, shareholder meetings, and high-profile engagements; assist with pre-event security planning

Protective Intelligence Analyst

• Utilize security tools to analyze, investigate, and triage security alerts
• Monitor our customers environments, including cloud and SaaS solutions for evidence of adversarial activity
• Perform in-depth analysis and investigation of high-priority cybersecurity incidents
• Utilize advanced tools, such as host based digital forensics or malware analysis capabilities, to identify incidents’ root causes, scope, and impact
• Collaborate with cyber threat hunting and cyber threat intelligence teams
• Participate in the development, implementation, and tuning of the SOC tools detection content and alerting signatures.
• Accurately document triage findings, and intake reports of external cybersecurity events from SOC customers via phone or email in the SOCs Incident Management System(IMS)
• Learn new open and closed-source investigative techniques
• Perform research into emerging threats and vulnerabilities to aid their prevention and mitigation
• Help shape the evolution of processes and procedures of the SOC
• Provide guidance and mentorship to Tier 1 SOC Analysts to enhance their skills and capabilities

Tier 2 Incident Response Analyst

• Partner with the Authentication team leader and technology SMEs to drive adoption of compliant, enterprise‑wide authentication solutions aligned to IAM standards.
• Monitor industry identity and authentication trends and engage peers to inform and evolve BAC’s security strategy.
• Apply industry best practices, standards, and documentation, recommending improvements based on practical experience.
• Build and maintain strong partnerships across Global Information Security (GIS) functions, Core Technology Infrastructure (CTI), Cyber Security Technology (CST), Third Party management, Global Compliance and Operations Risk (CGOR), internal audit, and regulatory agencies.
• Engage Product Managers and Senior Architects to align with the strategic identity and authentication technology roadmap.
• Collaborate with stakeholders to define identity and authentication requirements supporting long-term modernization across process, data, and technology.
• Influence tool owners to design and implement modern, efficient identity and authentication solutions that deliver sustainable risk reduction.
• Assess identity and authentication risks in business and technology decisions, ensuring compliance with internal policies and external regulatory requirements.
• Take ownership of identity and authentication risk management by proactively identifying issues, strengthening controls, and driving outcomes.
• Partner with IAM Governance leads to ensure that all authentication related IAM requirements are appropriately measured, reported, and governed.
• Actively participate in GIS IAM forums to support standards, controls, and Single Process Inventory (SPI) enhancements.
• Consult with business partners to identify gaps and governance issues and develop effective remediation strategies.
• Provide senior management with timely, transparent reporting on existing and emerging identity and authentication risks.
• Clearly communicate proposed changes through written materials and education sessions for team members and technology partners.
• Partner with policy governance teams to socialize and publish updates to identity and authentication standards.
• Support audit issue remediation, closure, and sustainability.

Identity and Access Management Analyst, Authentication Security

• Lead complex incident investigations and provide advanced analysis and response support.
• Conduct proactive threat hunting activities to identify emerging threats and adversary behavior.
• Perform root cause analysis and develop detailed incident reports.
• Support digital forensics and malware analysis efforts.
• Analyze endpoint, network, and identity telemetry to detect anomalous behavior.
• Integrate threat intelligence and red team findings into detection and response workflows.
• Provide escalation support and guidance to Tier I and Tier II analysts.
• Develop and refine detection use cases based on observed threats and trends.
• Document investigation processes, findings, and recommendations.
• Collaborate with engineering teams to improve detection and response capabilities.

Tier III Analyst, Threat Hunter

• Advance your career while impacting our national security in cyber as a SOC Analyst Principal at GDIT.
• Bring your cyber expertise and drive for innovation to GDIT.
• The SOC Analyst Principal must have:

See all jobs on JobTailor