Job Summary:
Supports systems engineering and software systems research to develop new capabilities, ensuring cybersecurity is fully integrated. Assists with technology research to evaluate potential vulnerabilities in cyberspace systems.
Key Responsibilities:
Knowledge of systems administration and troubleshooting concepts. Knowledge of server and client operating systems and supporting software. Conducts vulnerability scans and recognizes findings in systems. Identifies systemic security issues based on the analysis of vulnerability and configuration data. Documents how the implementation of a new system or new interface between systems impacts the current and target environment including, but not limited to, security posture. Conducts installation, implementation, configuration, and support of cybersecurity systems. Designs hardware, operating systems, and software applications to adequately address cybersecurity requirements. Competencies:Action oriented - Taking on new opportunities and tough challenges with a sense of urgency, high energy, and enthusiasm.
Balances stakeholders - Anticipating and balancing the needs of multiple stakeholders.
Ensures accountability - Holding self and others accountable to meet commitments.
Instills trust - Gaining the confidence and trust of others through honesty, integrity, and authenticity.
Manages complexity - Making sense of complex, high quantity, and sometimes contradictory information to effectively solve problems.
Tech savvy - Anticipating and adopting innovations in business-building digital and technology applications.
Cybersecurity Vulnerability Assessment and Management - Conducts assessments of threats and vulnerabilities; determines deviations from acceptable configurations and policies; assesses level of risk using cybersecurity standards and tools to develop and/or recommend appropriate mitigation countermeasures in operational and nonoperational situations.
Data Administration - Administers data storage and applications through proper training and coordinated efforts with internal and external partners to maintain system health and uptime.
Incident Management - Maintains reported issues or requests assigned via the Incident Management system to log actions taken and track trends.
Network Services - Installs, configures, tests, operates, maintains and manages network security equipment and software through proper training and collaboration with internal and external partners to enable the secure sharing and transmission of data in support of cybersecurity and business information systems.
Systems Administration - Installs, configures, troubleshoots and maintains server configurations through proper training and coordinated efforts with internal and external partners to ensure the confidentiality, integrity and availability of data and systems.
Troubleshooting - Diagnoses and resolves the customer-identified issue by utilizing appropriate department standards to satisfy customer expectations.
Values differences - Recognizing the value that different perspectives and cultures bring to an organization.
Education, Licenses, Certifications:
College, university, or equivalent degree in Computer Science, Information Technology, Business, or related subject, or relevant equivalent experience required. This position may require licensing for compliance with export controls or sanctions regulations.
Experience:
1-3 years of cybersecurity work experience
Job Responsibilities
• Collect, review, and triage cyber threat intelligence from commercial, open-source, industry, and internal sources.
• Monitor emerging threat activity, campaigns, vulnerabilities, and adversary behaviors relevant to the organization.
• Develop and maintain threat actor profiles, threat lane documentation, and intelligence records.
• Translate intelligence findings into actionable recommendations for detection, hunting, validation, remediation, or defensive improvements.
• Produce concise intelligence summaries, briefings, and action packets for technical and leadership audiences.
• Assist in developing and refining threat hypotheses to support proactive security activities.
• Collaborate with threat hunting, adversary emulation, vulnerability management, and security operations teams to ensure intelligence is operationalized.
• Track intelligence-driven actions and document outcomes to measure effectiveness and ensure closure.
• Support maintenance of intelligence repositories, workflows, and reporting processes within the Cyber Catalyst program.
• Participate in the identification and prioritization of threats based on organizational exposure, credibility, and potential business impact.
• Contribute to periodic reporting on intelligence trends, notable findings, and program metrics.
• Continuously research emerging cyber threats, attacker techniques, and industry developments to improve organizational awareness.
Requirements / Qualifications
• Bachelor’s degree in Cybersecurity, Information Technology, Intelligence Studies, Criminal Justice, or a related field; equivalent experience may be considered.
• 0–3 years of experience in cybersecurity, threat intelligence, security operations, vulnerability management, or related disciplines.
• Foundational understanding of the cyber threat landscape and common attacker methodologies.
• Familiarity with frameworks such as MITRE ATT&CK and the cyber kill chain.
• Strong analytical, critical thinking, and problem-solving skills.
• Effective written and verbal communication skills, including the ability to communicate technical concepts to diverse audiences.
• Ability to organize and prioritize multiple activities while maintaining attention to detail.
• Experience with Microsoft Office products and the ability to learn intelligence and security tooling quickly.
Preferred Qualifications
• Experience working in a Security Operations Center (SOC), intelligence function, or cyber internship program.
• Exposure to threat intelligence platforms, SIEM solutions, ASM tools, or case management systems.
• Relevant certifications such as CompTIA Security+, GCTI, CTIA, or equivalent.
• Familiarity with scripting or query languages (e.g., Python, KQL, SPL) for basic analysis and investigation.