TDI is seeking a Target Analyst Reporter (TAR). This exciting role is part of a large team researching vulnerabilities of large-scale systems and developing assessments which are briefed to high level Government officials. The ideal candidate will research, analyze, and report intelligence in support of Signals Intelligence, Information Assurance, and Computer Network Operations.
This position is fully onsite in Linthicum, MD. An active TS/SCI with a Fullscope Polygraph security clearance is required.RESPONSIBILITIES:
- Research, analyze, prioritize, and report information obtained through passive and active collection, network evaluation and analysis, and collateral sources (i.e., MASINT, IMINT, HUINT, Open Source, etc.).
- Produce intelligence products addressing developments, trends, indications, warnings, and situational awareness regarding specific targets.
- Write, edit, review, and perform quality control of senior-level technical and analytic reports related to Signals Intelligence or Information Assurance.
- Synthesize information from multiple sources and extract relevant contextual intelligence.
- Ensure reporting complies with applicable standards, laws, directives, and intelligence and Information Assurance policies.
- Handle sensitive reporting and review work products prior to dissemination.
- Communicate target and technical information in accordance with customer requirements and policies.
- Provide guidance, mentoring, and feedback on written reports.
- Apply appropriate techniques and tools to collect, analyze, and document information.
- TS/SCI FSP (with MPO) security clearance is required.
- Bachelor’s degree and 7 years of experience across at least 2 of the following fields:
- Computer Network Exploitation
- Vulnerability Assessment
- Penetration Testing
- Incident Response
- Network and/or server forensics
- Cryptanalytic work in a military or intelligence community organization
- Cryptology in a military or intelligence community organization
- 2+ years of experience in at least 1 of the following:
- Exploit development for Microsoft Windows or UNIX operating systems
- Exploit development for personal computer/mobile device operating systems (e.g., Android, Blackberry, iPhone, iPad)
- Software Reverse Engineering, including code disassemblers and debugging tools (e.g., IDA Pro, Ollydbg)
- Code-in-memory analysis, including RAM snapshots, Windows crash dumps, and/or UNIX kernel dumps
- Implementing networks with IPv6 protocols
- 1+ year of experience in at least 2 of the following:
- File Hashing and Fuzzy File Hashing (e.g., ssdeep, fciv, md5deep)
- Intrusion detection tools (e.g., Snort, BroIDS)
- Packet capture/evaluation (e.g., tcpdump, ethereal/wireshark, NOSEHAIR)
- Network mapping/discovery (e.g., nmap, TRICKLER)
- Industry-standard system/network tools (e.g., netcat, netstat, traceroute, rpcinfo, nbtscan, snmpwalk, Sysinternals suite)
Skills Required
- Active TS/SCI security clearance with Fullscope Polygraph
- Bachelor's degree
- Seven years of experience across at least two fields including computer network exploitation, vulnerability assessment, penetration testing, incident response, network or server forensics, cryptanalytic work, or cryptology
- Two or more years of experience in exploit development, software reverse engineering, code-in-memory analysis, or IPv6 network implementation
- One or more years of experience in at least two areas including file hashing, intrusion detection, packet capture, network mapping, or industry-standard system and network tools
What We Do
For over 20 years, TDI’s one and only passion has been delivering cybersecurity solutions to effectively manage the business of cyber. At the global vanguard of innovation, we created Cybersecurity Performance Management (CPM) and the industry-leading CPM platform, CnSight®. Combining CnSight® with our remarkable historical experience and our exceptional capabilities of cyber operations and compliance, we offer Managed Cybersecurity Performance, a first of its kind managed CPM offering. TDI’s CPM solutions mitigate risk, reduce ransomware, provide continuous compliance, improve cyber-ROI, and provide comprehensive instantaneous visibility into how an organization is performing against its cyber strategy, particularly for Boards of Directors. CnSight® is the industry-leading Cybersecurity Performance Management (CPM) platform which mitigates risk, reduces ransomware, provides continuous compliance, improves cyber-ROI, and provides comprehensive instantaneous visibility into how an organization is performing against its cyber strategy, so executives and Boards may effectively manage the business of cybersecurity– the result: reduced stress, better performance, less cost, and a true understanding of cyber investment. With CnSight® at its core, TDI’s Managed Cybersecurity Performance offering ensures strategic cyber goals are met to protect an organization’s investments, assets and reputation by reducing the risk of ransomware, lowering cyber insurance premiums, improving ROI, reducing legal and fiduciary liability, delivering actionable reporting to the Board and C-Suite, providing on-call advice, ensuring continuous compliance and providing subject matter expertise on the organization’s behalf in meeting with the C-Suite and the Board, dealing with auditors, and supporting budget decisions – the result: reduced stress, better performance, less cost, and a true understanding of cyber investment.
