Advanced Threat Analyst

We are seeking a highly skilled and innovative Advanced Threat Analyst to join our team in the greater DMV area, supporting the Army National Guard.

Key Responsibilities

Aggregate and analyze telemetry and vulnerability data (ACAS, Forescout, SIEM, EDR/EDRlike tools) to validate exposure, assess exploitability, and prioritize risk using CVSS, mission impact, and MITRE ATT&CK mappings.
• Correlate vulnerability findings with asset criticality, configuration baselines, patch records, and STIG/IAVM compliance to identify systemic weaknesses and trends.
• Perform advanced threat hunting, TTP mapping, and adversary behavior analysis; develop detection hypotheses and analytic signatures for operationalization.
• Lead remediation validation and verification efforts; coordinate mitigations with system owners, SOC, CIRT, and engineering teams; update POA&Ms and RMF/eMASS artifacts.
• Produce executivegrade risk briefings, trend analyses, and operational reports translating technical risk into prioritized COAs for leadership.
• Maintain evidentiary integrity for findings, ensure auditability in eMASS/enterprise governance tools, and support CCRI/inspection readiness.
• Monitor and report emerging threat patterns and readiness gaps; recommend capability or process improvements.
• Mentor junior analysts and contribute to analytic method standardization, playbooks, and QA of analytic products.

#ENOCS

Required Qualifications

• Minimum of 12 years with BS/BA; Minimum of 10 years with MS/MA; Minimum of 7 years with Ph.D.
• Clearance: TS/SCI (active)
• Education / Training / Certification: Candidate must meet ONE:
  1. Master's degree or Ph.D. in Strategic Intelligence, Cybersecurity Risk Management, Computer Science, or related field; OR
  2. Relevant DoD/Military advanced threat/CTI training (examples: DIA Advanced Cyber Threat Analysis; NCS Advanced Cyber Intelligence; SANS FOR578); OR
  3. Relevant professional certifications or equivalent experience (examples: CISSP, CASP+, GIAC GCIA, GIAC GREM, CREST CCTIM).
• Experience: Minimum Progressive cyber threat/vulnerability analysis, with at least 5 years performing advanced threat hunting, vulnerability correlation, and risk prioritization in enterprise or DoD environments.
• Technical skills: Deep experience with ACAS, Forescout (or NAC), SIEM/SOAR, EDR/endpoint telemetry, vulnerability management platforms, CVSS scoring, STIG/IAVM interpretation, and eMASS/RMF artifact workflows.
• Analysis tools: Proficiency with scripting (Python), data analytics, and bigdata/ELK/Splunk or equivalent platforms; strong report writing and briefing skills.

Desired / Preferred

• Prior DoD/CCRI/ARNG/NETCOM/ARCYBER analytic experience
• Experience conducting exploitability validation, malware reverseengineering, or RED/Purple team engagements
• Familiarity with threat intelligence platforms (TIP), CTI ingestion, and analytic normalization

#ENOCS

Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world's leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees do the can't be done by solving the most daunting challenges facing our customers. Visit peraton.com to learn how we're keeping people around the world safe and secure.