Threat Specialist Job at Palantir Technologies (Washington, D.C.)

Network Threat Support Specialist

The Network Threat Support Specialist will be actively integrated into a compute...

Location

United States , Fort Meade or Columbia

Salary:

Not provided

GS Consulting

Expiration Date

Until further notice

Requirements

Must be a United States citizen
Position requires candidates to have the ability to obtain and maintain a background investigation
Bachelor's degree or equivalent military training
Experience discovering threats and/or anomalies in network data
Experience discovering and responding to network intrusions
Experience adjusting security controls to prevent malware and/or intrusion activity
Ability to produce formal documentation on analysis and assessments
Experience conducting analysis with DNI/DNR
Self motivated and willing to work with a team
The ability to appropriately manage individual schedule

Job Responsibility

Identify adversarial threats and activities against DoD and US government network
Analyze and discover threat and intrusion events
Leverage technical analysis capabilities to analyze malware and develop methods to defend against malicious activity
Respond to and analyze network intrusion and attack events
Characterize the capabilities of malware, document how to detect malware, and assess it’s impact
Analyze systems and networks of interest, identify network vulnerabilities, and create techniques to exploit networks
Write reports for customers based on research and analysis of cyber threat activities and techniques

Cyber Analysis Support Specialist

The Cyber Analysis Support Specialist will be actively integrated into a compute...

Location

United States , Fort Meade or Columbia

Salary:

Not provided

GS Consulting

Expiration Date

Until further notice

Requirements

Must be a United States citizen
Position requires candidates to have the ability to obtain and maintain a background investigation
Bachelor's degree in liberal arts or sciences or equivalent military training
Experience with computer network operations and SIGINT tools and databases
Ability to produce formal documentation on analysis and assessments
Experience conducting analysis with DNI/DNR
Self motivated and willing to work with a team
The ability to appropriately manage individual schedule
The ability to work non-standard hours when needed

Job Responsibility

Conduct research, evaluate technical threat data, and leverage all-source intelligence in a network operations and cyber warfare environment
Evaluate cyber threat events to determine their impact on DoD and US Government operations and understand adversary capabilities
Leverage multiple analytic tools to conduct research and analyze data
Analyze vulnerabilities associated with DoD and US Government networks to determine risk
Write collection requirements and tasking for signals intelligence collection systems based on analytic assessments
Write reports for customers based on research and analysis of cyber threat activities and techniques

Threat Intelligence Analyst

Threat Intelligence Analyst - initial 3-6 month contract. We're seeking a highly...

Location

United Kingdom , Portsmouth or London

Salary:

Not provided

TRIA

Expiration Date

Until further notice

Requirements

5+ years' experience in Threat Intelligence, SOC or Incident Response
Strong working knowledge of MITRE ATT&CK and threat actor lifecycle analysis
Hands-on experience with threat intelligence platforms such as MISP, Recorded Future, Anomali or similar
Strong experience with Microsoft security tooling, ideally Sentinel and Defender
Proficiency in KQL and working knowledge of Python for automation and enrichment
Experience integrating intelligence into SIEM, EDR/XDR, and cloud security platforms (Microsoft, AWS, CrowdStrike, etc.)
Deep understanding of the UK cyber threat landscape, particularly critical national infrastructure and public sector threats
Comfortable operating as a sole senior threat intelligence specialist while collaborating across SOC and InfoSec teams

Job Responsibility

Lead threat actor tracking and attribution, focusing on APTs, ransomware, supply chain attacks and UK-relevant campaigns
Maintain adversary profiles using MITRE ATT&CK, Diamond Model and sector-specific threat frameworks
Correlate internal security telemetry with external intelligence feeds (e.g. MISP, Recorded Future, ISACs, Microsoft TI)
Operationalise STIX/TAXII feeds and enrich IOC/IOA pipelines for SOC and Incident Response teams
Translate threat intelligence into actionable detections, working with engineers on KQL/SPL queries and proactive threat hunts
Produce regular threat reports and briefings for SOC leadership, CISO and senior stakeholders, including board-level risk narratives
Manage and oversee a third-party cyber threat intelligence provider, ensuring quality, relevance and value
Engage with UK threat-sharing communities and maintain internal threat intelligence documentation and playbooks

Fulltime

Threat Analyst

The Threat Analyst is responsible for identifying, investigating, and responding...

Location

United States , Orlando

Salary:

Not provided

ThreatLocker

Expiration Date

Until further notice

Requirements

3 years of experience in Information Technology with 1 year of specialized work in any of the following IT domains: Active Directory
Application Development
Network Administration
Information Security
Experience with virtual machines on VirtualBox, Workstation Pro (Type 2 hypervisor)
Bare-metal (type 1) hypervisor experience (ESXi, HyperV) ++
Foundational knowledge of Active Directory infrastructure
Proficient in PowerShell and Python
Strong understanding of foundational Windows OS components: Windows Firewall, Windows Event Logs, Windows file structure, PowerShell
Strong understanding of networking and security principles: RFC 1918, DNS, well-known ports, TCP/IP, CIA triad and its relevance to Information Security, AAA Framework

Job Responsibility

Monitor security tools and systems (SIEM, IDS/IPS, EDR, etc.) for suspicious activity or breaches
Analyze security alerts and data to identify potential threats, vulnerabilities, and compromises
Build and refine detection capabilities using security tools, threat intelligence, and machine learning models
Lead and participate in the response to security incidents (investigating, containing, eradicating, and recovering from threats)
Collaborate with cross-functional teams to develop incident handling processes and ensure timely remediation
Create detailed post-incident reports, including root cause analysis and recommendations for improvements
Develop automated tools and scripts to enhance security detection capabilities and streamline threat detection workflows
Maintain and enhance detection tools, including writing custom SNORT, SIGMA, and YARA rules, and updating rulesets in accordance with new threats
Conduct forensic analysis and threat hunting to identify malicious activity
Review logs from various systems (e.g., firewalls, servers, network devices) to uncover unauthorized activities

Fulltime

New