Description
Leidos' Digital Modernization sector is seeking a Threat Intelligence Platform Integrations SME to act as a mission owner for their Threat Intelligence Platform. The successful candidate will provide sustained support for CTI fusion, low-regret model scoring, and the implementation of blocking actions to create advanced defensive capabilities.
The role involves:
- Acting as the mission owner for sustained Threat Intelligence Platform support
- Maintaining and enhancing capability performance by integrating threat feeds across various DISA capabilities
- Integrating block lists to support automated defensive solutions
- Fusing multiple intelligence sources to develop comprehensive products
- Researching and investigating current threats
- Analyzing data and threat intelligence reports
- Producing high-quality papers, presentations, and recommendations for senior U.S. government intelligence and operations officials
The position requires:
- An active TS/SCI clearance
- A Bachelor's degree in a related discipline and 4+ years of directly relevant experience
- 2+ years of experience working with Threat Intelligence Platforms (TIPs) and configuring threat feed integrations
- Proficiency in programming using Python
- Experience with configuration editing using JSON and YAML
- Experience with leveraging version control systems such as Git
Preferred skills include:
- Deep understanding of defensive tactics, techniques, and procedures (TTPs) for threat detection and response
- Experience with automated block list integrations and solutions
- Experience with integration of systems as well as assessing, scoring, and operationalizing new CTI feeds
- Knowledge utilizing STIX and TAXII standards to develop, configure, and automate threat intelligence solutions across enterprise security platforms
The salary range for this position is $87,100.00 - $157,450.00.