Cyber Threat Program Manager

Who We're Looking For (Position Overview)

Spry Methods is seeking a Technical Lead to provide technical leadership for all-source cyber analysis and reporting activities. This position will serve as the Contractor representative to executive leadership and will be responsible for the quality and efficiency of technical performance. The Technical Lead will supervise intelligence analysis teams, guide cyber threat and malware analysis activities, and support applicable financial and business processes while excluding inherently governmental functions

What Your Day-To-Day Looks Like (Position Responsibilities):

• Lead technical efforts supporting all-source cyber analysis, threat intelligence, and reporting.

• Supervise teams performing cyber intelligence analysis and ensure the quality, accuracy, and timeliness of their work.

• Direct the collection, analysis, validation, and dissemination of cyber threat intelligence and indicators of compromise.

• Guide suspicious-file scanning, indicator queries, pivoting, and malware analysis using tools such as VirusTotal.

• Oversee open-source and closed-source intelligence gathering, source verification, data fusion, link analysis, and threat actor research.

• Support malware and network analysis involving protocols, persistence mechanisms, encoding, encryption, and Advanced Persistent Threat activity.

• Review analytical products and technical deliverables for quality, relevance, and compliance with program requirements.

• Coordinate technical activities with Government stakeholders, mission partners, and Contractor leadership.

• Support program performance, quality assurance, process improvement, and applicable financial and business processes.

What You Need to Succeed (Minimum Requirements):

• TS/SCI clearance eligibility.

• Experience within the last 10 years leading technical efforts and supervising teams supporting all-source cyber analysis and reporting.

• Experience within the last 10 years using tools such as VirusTotal for suspicious-file scanning, indicator queries, pivoting, and malware analysis.

• Experience within the last 10 years conducting OSINT and closed-source intelligence gathering, source verification, data fusion, link analysis, and threat actor analysis.

• Experience within the last 10 years conducting malware and network analysis involving protocols, persistence mechanisms, encoding, encryption, and Advanced Persistent Threat actors.

Ideally, You Also Have (Preferred Qualifications):

• Experience supporting the Defense Industrial Base, or a similar DoD cyber mission.

• Experience producing or reviewing cyber threat intelligence and all-source analytical products.

• Knowledge of Indicators of Compromise, threat actor tactics, techniques, and procedures, and malware analysis.

• Familiarity with DIB cybersecurity requirements, incident analysis, and threat information sharing.

• Experience engaging Government stakeholders and providing quality oversight for technical deliverables.