All-Source Intelligence Analyst

Key Skills

Python Programming, Scala Programming, C++, Java Programming, Machine learning techniques, Data science techniques, SQL, Apache Hadoop, MapReduce, TensorFlow, PyTorch, R Programming

Job Description

This position is for an All-Source Intelligence Analyst on UKG’s Global Security Threat Intelligence team. Our primary mission is to inform decision makers with intelligence-driven information for technical and physical improvements of our environments. The ideal candidate will detail and analyze significant current events, threat actors, campaigns, and tactics, techniques, and procedures (TTPs) in the physical and cyber environments for the purposes of synthesizing information, identifying patterns, and understanding impacts to our enterprise. The candidate will also be responsible for continuously assessing and reviewing intelligence requirements, gathering and centralizing relevant sources of intelligence, and developing and disseminating threat intelligence. The candidate must have experience in an analyst role applying critical thinking and structured analytic techniques. The candidate must also have the ability to communicate well and motivate and work with cross functional teams and individual contributors in support of UKG’s critical business enterprise needs.

Required Qualifications:

• 6+ years of IT security experience
• 3+ years in an analytic role leveraging critical thinking and structured analytic techniques to form analytic judgments
• 3+ years of experience with incident response, security operations, malware analysis, threat intelligence, or data science
• 3+ years of experience applying common threat intelligence models (e.g. MITRE ATT&CK Framework, Cyber Kill Chain, NIST’s Cybersecurity Framework)
• 2+ years of experience using scripting to collect data and automate security tasks
• Knowledge of technical and human systems to identify the security controls in place and their usage, also a familiarity with weaknesses in application deployment and databases
• Knowledge of (logical and physical) server-, network- and host-based indicators
• Effective understanding and implementation of security issues that are associated with operating systems, the cloud environment, and networking
• Knowledge of programming and scripting languages
• Established knowledge of analytic tradecraft, along with a demonstrated ability to interpret complex cyber security issues
• Experience collecting, analyzing, and interpreting qualitative and quantitative data from multiple sources
• Hands on technical expertise in at least two of the following areas: adversary emulation, defensive cyber operations, cyber analytics and malware analysis, cyber deception and adversary engagement, cyber effects and reverse engineering, and cyber forensics
• Demonstrated ability to identify threat actor TTPs and campaigns, gather information for reconnaissance, including large and unstructured data sets
• Demonstrated ability to automate recurring tasks using scripting to improve the overall effectiveness of the team
• (Experience, Education, Certification, License and Training)

Education

• One or more of the following cybersecurity certifications (or equivalent military or government certification): Security+, Certified Threat Intelligence Analyst (CTIA), GIAC Cyber Threat Intelligence (GCTI), Offensive Security Certified Professional (OSCP), Certified Ethical Hacker (CEH), GIAC Certified Incident Handler (GCIH), Certified Information Security Auditor (CISA), Certified Information Systems Security Professional (CISSP).
• Preferred Qualifications:
• Prior military or Intelligence Community experience
• Formal training in critical thinking and structured analysis
• Prior operational use of the Intelligence Cycle and F3EAD