Part-time Junior Cyber Threat Analyst (Remote)

Maritime Transportation System ISAC

Helping Build the Maritime Cybersecurity Community

Background

The Maritime Transportation System Information Sharing and Analysis Center (MTS-ISAC) is a nonprofit that promotes and facilitates maritime cybersecurity information sharing, situational awareness, and collaboration efforts between private and public sector stakeholders to effectively improve cyber risk management across the global Maritime Transportation System (MTS) community. The MTS-ISAC seeks a part-time Junior Cyber Threat Analyst to support the collection, analysis, and dissemination of stakeholder provided cyber threat information.

Position Overview

The MTS-ISAC is seeking a Junior Cyber Threat Analyst (available as Part-Time initially) to join our Security Operations Center (SOC) team. This role serves as a foundational analytical layer for the ISAC. Rather than acting as a passive data aggregator, the Junior Analyst will actively evaluate incoming sector-specific cyber threat data, perform contextual triage, identify patterns, and assist in translating raw data into actionable intelligence products.

The ideal candidate has a natural passion for investigative analytics, strong critical thinking skills, excellent technical writing abilities, and a desire to protect critical infrastructure. The candidate must be able to work in a fast-pasted, dynamic, and collaborative environment. While an understanding of the maritime transportation system is not a hiring requirement, growing industry specific knowledge, cyber threat actors and methods, is. Holding a security clearance is not a pre-requisite; however, the candidate will need to pass a background check and offer references.

This position reports directly to the Security Operations team and primarily interfaces with fellow analysts and the VP of Operations.

Role Track & Expectations

Depending on organizational needs and candidate availability, this role will be filled under one of the following two tracks:

• Core Focus: Daily operational continuity, contextual indicator analysis, and deep stakeholder engagement.
• Expected Ownership:
• Manages the real-time triage queue, evaluating threat data for urgency and relevance.
• Serves as a primary point of contact for routine Stakeholder Requests for Information (RFIs).
• Acts as a peer-mentor to help student interns learn basic analytical tradecraft.
• Researches threat actor behaviors to contribute heavily to quarterly and annual threat advisories.

Roles and Responsibilities

Threat Analysis, Enrichment & Triage

• Analytical Triage: Perform initial analysis of automated threat feeds and customer-submitted shares to determine the credibility, value, and severity of the threat.
• Indicator Analysis: Go beyond data entry—analyze and normalize IOCs from phishing headers, malware reports, firewalls, and network logs. Evaluate how these indicators correlate with known maritime threat landscapes.
• Platform Enrichment: Update the MTS-ISAC’s Threat Information Sharing Platform instance, ensuring data is fully enriched with appropriate context, tags, and threat actor associations.

Intelligence Product Creation

• Trending Analysis: Assemble and synthesize open-source intelligence (OSINT) and stakeholder data to produce daily intelligence bulletins and identify weekly/monthly trends.
• Technical Alerts: Research threat actor tactics, techniques, and procedures (TTPs) and cybersecurity best practices to draft actionable threat reports and advisories.

Stakeholder Engagement & Support

• Investigative RFIs: Respond to Requests for Information (RFIs) from stakeholders by conducting targeted research and providing clear, analyzed answers.
• Briefings & Presentations: Present analytic findings and threat briefings during stakeholder meetings, webinars, and community syncs.
• Intern Development: Assist in growing the next generation of analysts by helping student interns learn analytical frameworks and tradecraft.

Job Requirements

Education, Training & Experience

We value diverse pathways into cybersecurity. We encourage candidates to apply if they meet any of the following criteria:

• Education/Training:
• An Associate’s or Bachelor’s degree in Cybersecurity, Intelligence Studies, Homeland Security, or a related technical field; OR
• Completion of some college coursework in cybersecurity/intelligence combined with independent study; OR
• Equivalent technical training (e.g., cybersecurity bootcamps, specialized industry training courses); OR
• Military training within a cyber, cryptologic, or intelligence-based rating.
• Experience: 0–2 years of experience in IT, cybersecurity, open-source intelligence (OSINT), social media research, or an investigative/due diligence function (relevant internships count!).

Core Technical & Analytical Skills

• Analytical Tradecraft: Ability to determine the significance and relevancy of information from disparate data sources to produce clear, concise, and timely analytical products.
• Networking Fundamentals: A basic understanding of the TCP/IP stack, common network/web protocols (UDP, IPSEC, HTTP, HTTPS), and proficiency using online investigative tools (Whois, Ping, Traceroute, etc.).
• Frameworks & Logs: Familiarity with the MITRE ATT&CK framework and the ability to interpret basic security logs (firewalls, IDS/IPS, or endpoint tools).

Certifications (Preferred)

• CompTIA Security+, GIAC Foundational (GFACT), or an equivalent foundational security/intelligence credential.

Desired Qualifications (The "Plus" Factors)

• Prior military experience within an intelligence or cyber domain.
• Prior experience or familiarity with the maritime transportation sector or marine electronics (IT/OT/IoT).
• Strong written and oral communication skills; comfortable presenting to groups.
• High level of self-governance; comfortable maintaining high productivity in a fully remote environment without direct supervision.
• Maritime sector experience.
• Experience with information security.

What We Offer

• 100% Remote work environment.
• The opportunity to safeguard critical international infrastructure.
• Direct mentorship from senior leadership and exposure to a global network of cybersecurity professionals.

Pay: $30,000.00 - $40,000.00 per year

Benefits

• Flexible schedule
• Professional development assistance

Experience

• JSON: 1 year (Preferred)
• Cybersecurity: 1 year (Preferred)
• Linux: 1 year (Preferred)
• Data analytics: 1 year (Preferred)
• USCG or Navy: 3 years (Preferred)