Adversary Network Intelligence Analyst

MANTECH; Quantico (VA); On-site; USD 90,000 - 130,000; Full time

Job summary

MANTECH seeks an Adversary Network Intelligence Analyst to join the USMC Team in Stafford, VA. Apply SIGINT and all-source methods to analyze foreign networks and adversary IT infrastructure in support of tactical Marine Corps planners and cyber teams.

Responsibilities include mapping networks, identifying vulnerabilities, fusing intelligence sources, profiling C2 systems, and producing finished intelligence for leadership and operators.

Qualifications

• Bachelor’s degree required with at least 3 years of related DoD/IC network analysis or cyber threat intelligence experience; an additional 2 years can substitute for the degree.
• Strong understanding of OSI, TCP/IP, DNS, TLS, cloud infrastructure and routing protocols (BGP/OSPF/EIGRP).
• Proven capability in structured intelligence analysis under IC Analytic Standards.
• Experience with technical research tools such as passive DNS, certificate transparency, WHOIS/RDAP, and network visualization platforms.

Responsibilities

• Adversary Network Mapping: reconstruct target networks and characterize topologies, assets, domains, cloud services, and C2 nodes.
• Vulnerability & Vector Identification: identify ingress points and weaknesses across hardware, modems, fiber optics, and satellite links; assess OPSEC.
• Multi-Source Intelligence Fusion: correlate telemetry with OSINT/SIGINT insights and malware reports to assess adversary capabilities and lifecycles.
• Red C2 & Threat Profiling: analyze foreign C2 systems and doctrines to predict tactical directives.
• Finished Intelligence Production: author timely intelligence products, briefings, diagrams, and threat reports for USMC leadership.
• Operational & Tradecraft Support: assist targeting, collection refinement, and development of analytical tradecraft and tools.

Skills

3+ years DoD/IC network analysis

Networking fundamentals

Structured intelligence analysis

OPSEC awareness

Education

Bachelor’s degree

Tools

Passive DNS

Certificate transparency

WHOIS/RDAP

Network visualization platforms

Job description

MANTECH seeks a motivated, career and customer-oriented Adversary Network Intelligence Analyst to join our team USMC Team in Stafford, VA. In this role, you will apply specialized SIGINT and all-source network intelligence techniques to analyze, map, and evaluate foreign communications and adversary IT infrastructure, directly supporting tactical Marine Corps planners, defensive cyber teams, and strategic operations.

Responsibilities include but are not limited to:

Adversary Network Mapping: Reconstruct complex, fragmented target networks and characterise logical/physical topologies, IP assets, domains, cloud services, and C2 nodes from diverse intelligence feeds.

Vulnerability & Vector Identification: Identify ingress points, vulnerable interface nodes, and structural weaknesses across hardware, modems, fiber optics, and satellite links; evaluate adversary operational security (OPSEC) practices and evasion tactics.

Multi-Source Intelligence Fusion: Correlate technical network telemetry with all-source intelligence (OSINT, SIGINT-derived insights, malware reporting) to build comprehensive assessments of adversary capabilities, intent, and infrastructure lifecycles.

Red C2 & Threat Profiling: Conduct deep-dive analysis of foreign C2 systems, organizational hierarchies, and doctrine to help command elements predict how adversary leadership issues tactical directives.

Finished Intelligence Production: Author timely, accurate intelligence products—including technical assessments, briefings, network diagrams, and threat reports—tailored for USMC intelligence officers, tactical planners, and strategic leadership.

Operational & Tradecraft Support: Partner with cyber operators and collection managers to support targeting, disruption efforts, and collection refinement. Contribute to the development of analytical tradecraft, methodologies, and tools for large-scale network parsing.

Minimum Qualifications:

Bachelor’s degree and at least 3 years of related experience in DoD/IC network analysis or cyber threat intelligence. An additional 2 years of experience may be substituted inlieu ofdegree.

Strong technical understanding of networking fundamentals (OSI model, TCP/IP, DNS, TLS, cloud infrastructure) and routing protocols (BGP, OSPF, EIGRP).

Proven capability in structured intelligence analysis (link analysis, pattern recognition) under Intelligence Community Analytic Standards.

Practical experience with technical research tools (passive DNS, certificate transparency, WHOIS/RDAP, and network visualization platforms).

Preferred Qualifications:

C2 & Red System Modeling: Deep knowledge of foreign C2 systems, military communication doctrines, and infrastructure correlation with specific intrusion sets or campaigns.

Scripting & Data Enrichment: Working knowledge of scripting languages (Python preferred) to automate data enrichment and parse massive metadata sets.

Frameworks & Disruption: Familiarity with the MITRE ATT&CK framework and experience supporting collection management, threat hunting, or takedown/disruption operations.

Certifications: Active industry credentials such as CompTIA (Network+, A+, ITF), GIAC Cyber Threat Intelligence (GCTI), or Certified Threat Intelligence Analyst (CTIA).

Clearance Requirements:

Must have a current / active Top Secret / SCI clearance.

Physical Requirements:

Must be able to remain in a stationary position 50%.

Needs to occasionally move about inside the office to access file cabinets, office machinery, etc.