• Develops, manages, and regularly updates a research program for the mission center that reflects subject-matter expertise in global, regional, and functional economic security-related threats. Interacts with Intelligence Community (IC) counterparts, DHS components, state, local, tribal, and territorial law enforcement agencies, and private sector stakeholders.• Represents the mission center as the IC’s authority in threats pertaining to US economic security. Leads the development of policies and procedures for interagency analytical and operational cooperation. Collaborates and coordinates with IC, component, and non-title-50 government agencies to identify and fill information needs. • Produces and assists other analysts in the production of finished estimative intelligence by analyzing foreign reactions to US economic and trade policy and statistical analysis of trade data. Identifies requirements and researches raw intelligence and databases, open-source information, DHS component and mission partner operational information, and ancillary sources to analyze, produce, and disseminate assessments that inform strategy, policy, plans, and actions that address threats to US economic security.• Leads conceptualization sessions with analysts, functional experts, tradecraft specialists, and senior management in identifying key intelligence questions, intended audiences, and appropriate research methodologies. Develops project methodology and identifies operational and analytical techniques for accomplishing mission center objectives.• Coaches and provides substantive feedback to junior analysts in researching, drafting, and coordinating intelligence production. Assists junior analysts in developing key intelligence questions, ensure tailored customer focus, adherence to analytic tradecraft standards, and external coordination.

• Serves as a threat discovery and counter-infiltration (hunt) team member, responsible for detecting, identifying, and responding to malware incidents and other network- and host-based security policy violations. Proactively hunts for adversarial activity on customer systems, collects and analyzes flow data and forensic artifacts against technical advisories and baselined systems.• Identifies misconfigured networked devices and vulnerabilities adversaries exploit in network defense evaluations, analyze and report on threats to specific software, and conduct network terrain audits. Provides subject matter expertise to network stakeholders in written assessments and briefings that cover specific incidents and their contexts within larger adversarial campaigns to conduct disruptive attacks or espionage.• Identifies cyber key terrain and integrates intelligence reporting on adversarial tactics, techniques, and procedures into hunting methodology when collecting forensically relevant digital data. Applies discovery and counter-infiltration methodologies to identify, contain, and eradicate adversarial persistence in Windows and Linux environments. Assists asset owners in recovering system availability, restoring data, and validating network-wide restoration after incident response actions are completed. • Performs penetration tests and vulnerability assessments on customer network devices, operating systems, applications, and databases with a wide variety of security assessment tools and penetration testing frameworks. Presents findings to customers with programmatic and policy recommendations designed to minimize the risk of compromise.