## Overview Tharros combines extensive cyber defense knowledge with the world’s preeminent vulnerability expertise to identify and defend against attacks before they become problems. Working at mission speed, we harden mission systems faster and secure them for longer, so agencies never lose the mission edge. Tharros lifts the veil of enterprise cybersecurity to detect zero days before they affect you, enabling mission maneuverability and the confidence to move missions forward. In the ever-evolving realm of cyberspace, we are dedicated to becoming the paramount defender in the 5th warfighting domain. By pioneering innovative security solutions and fostering an environment of continuous learning and vigilance, we aim to protect the interests of our nation’s security. Our commitment to excellence in cybersecurity will establish new benchmarks, transforming the digital landscape into a secure and thriving frontier for future generations. Tharros. See Everything. Secure Anything. Tharros is committed to hiring and retaining a diverse workforce. We are proud to be an Equal Opportunity/Affirmative Action Employer and make employment decisions without regard to race, color, religion, creed, sex, sexual orientation, gender identity, marital status, national origin, age, veteran status, disability, or any other protected status. ## Description Tharros is seeking a DCISE Technical Lead to serve as the project lead for all Defense Industrial Base Collaborative Information Sharing Environment (DCISE) operations at the DoD Cyber Crime Center (DC3). This position provides technical oversight and guidance across five DCISE task areas and serves as the contractor representative to DCISE executive leadership. The Technical Lead will direct a team of cyber threat analysts and intelligence professionals who produce approximately 1,600 analytical products per year, conduct malware triage and analysis, manage partner engagement, and operate sensor platforms. Responsibilities: - Provide technical oversight and guidance on all DCISE tasks, including threat analysis, partner engagement, and analytical product development - Serve as the contractor representative to DCISE executive leadership - Supervise a team of cyber threat analysts, cyber intelligence analysts, and partner engagement specialists producing all-source cyber analytical products - Direct malware triage, suspicious file scanning, indicator pivoting, and network analysis operations - Oversee intelligence analysis processes including OSINT and closed-source intelligence gathering, source verification, data fusion, link analysis, and threat actor profiling - Manage the quality, timeliness, and accuracy of all DCISE deliverables - Support financial and business process management for DCISE tasks, excluding inherently governmental functions - Coordinate with DIB partners on cyber threat information sharing, incident response, and vulnerability mitigation - Contribute to the development and maintenance of DCISE SOPs and analytical tradecraft standards ## Requirements - Active Top Secret/SCI clearance eligibility - 10 years of experience leading technical efforts supporting intelligence analysis requirements in all-source cyber analysis and reporting - 10 years of experience supervising teams supporting intelligence analysis requirements in all-source cyber analysis and reporting - 10 years of experience with scanning tools (e.g., VirusTotal) to conduct suspicious file scanning, and performing queries, pivoting on indicators, and malware analysis on characteristics (MD5, SHA1, file size, file name, file paths) - 10 years of experience with intelligence analysis processes, including OSINT and closed-source intelligence gathering, source verification, data fusion, link analysis, and threat actor knowledge - 10 years of experience conducting malware and network analysis, identifying protocols, persistence mechanisms, encoding techniques, and encryption and how they are used by Advanced Persistent Threat (APT) actors Preferred Qualifications - Prior DCISE, CISA, or DC3 operational experience - Experience with DIB cybersecurity programs and 32 CFR Part 236 mandatory/voluntary reporting requirements - Familiarity with threat intelligence platforms (CrowdStrike, Intel 471, Recorded Future, or equivalent) - GIAC certifications (GCTI, GREM, GCIH) or equivalent technical credentials - Experience producing finished intelligence products under IC analytic standards