Cyber Threat Analyst – TS/SCI Clearance

About the role

The Defensive Cyber Operations (DCO) division within USARCC‑SWA is seeking a Cyber Threat Analyst with strong scripting abilities, systems security administration experience, and a TS/SCI clearance. You will design, automate, and maintain protective measures for systems, networks, and information while supporting host‑nation requirements.

Key responsibilities

• Monitor, detect, analyze, and correlate events using SIEM, big data analytics, and related platforms.
• Investigate compromises, initiate incident handling, and perform trend analysis.
• Conduct open‑source research on exploits and zero‑day vulnerabilities.
• Prepare comprehensive technical and executive reports.
• Configure and optimize detection/prevention tools, develop host and network signatures, and standardize them across endpoints.
• Develop, document, and refine Tactics, Techniques, and Procedures (TTP).
• Support the Computer Defense Assistance Program (CDAP) and collaborate on DCO strategy improvements.
• Maintain compliance knowledge, assist in incident response planning, and share threat intelligence with external agencies.

Required profile

• Active Top Secret clearance with SCI.
• At least one year of relevant cybersecurity experience.
• Ability to obtain and maintain host‑nation visa and driver’s license.

Required skills

• SIEM platforms
• Scripting (e.g., Python, PowerShell)
• Systems security administration
• Network security technologies
• Big data analytics for security
• Open‑source vulnerability research
• Host‑ and network‑based signature development
• Incident response and handling
• Threat intelligence and TTP development

What we offer

• Company‑paid housing and transportation
• Completion bonus
• Tuition reimbursement program