Cyber Intelligence Analyst

Noetic Strategies, Inc.; Huntsville (AL); On-site; USD 120,000 - 160,000; Full time

Job summary

Noetic Strategies, Inc. in Huntsville, AL is seeking a Cyber Intelligence Analyst to support intelligence analysis and cybersecurity missions.

You will research cyber threats, assess adversary capabilities, and produce intelligence reports for technical and operational audiences. The role requires all-source intelligence experience, cyber operations knowledge, and the ability to communicate findings clearly to diverse stakeholders.

Qualifications

• Active TS/SCI clearance required.
• Experience with all-source intelligence analysis to solve complex problems.
• Strong understanding of cyber threats and threat actors.
• Experience communicating technical information to diverse audiences.

Responsibilities

• Conduct all-source counterintelligence and cyber threat analysis focused on foreign intelligence services, cyber threat actors, and supply chain threats.
• Research cyber threat information from open-source, commercial, subscription, and internal sources.
• Monitor and assess cyber threat data to identify IOCs and TTPs and assess potential impacts.
• Use Splunk ES and Microsoft Sentinel to support threat monitoring and threat hunting.
• Develop intelligence reports and briefings communicating cyber threats and adversary capabilities.
• Coordinate with intelligence professionals and stakeholders to support assessments and recommendations.

Skills

All-source analysis

Cyber operations

Threat intelligence

Communication skills

Independent work

Tools

Splunk Enterprise Security

Microsoft Sentinel

Job description

Cyber Intelligence Analyst

Location: Huntsville, AL Clearance Required: Active DoD Top Secret/SCI

Position Summary

Noetic is seeking a Cyber Intelligence Analyst to support intelligence analysis and cybersecurity missions in Huntsville, Alabama. The analyst will research and evaluate cyber threats, foreign adversary capabilities, and potential vulnerabilities affecting software, technology, and defense systems.

The successful candidate will use intelligence sources, cyber threat data, and analytical tools to identify threat actors, assess tactics and techniques, and develop intelligence reports and briefings. This role requires experience with all-source intelligence analysis, cyber operations, and the ability to communicate findings to technical and operational stakeholders.

Primary Responsibilities

• Conduct all-source counterintelligence and cyber threat analysis focused on foreign intelligence services, cyber threat actors, and potential threats to software supply chains.
• Research and analyze cyber threat information from open-source, commercial, subscription-based, and internal intelligence sources.
• Monitor and assess cyber threat data to identify attack patterns, adversary methods, tactics, techniques, procedures (TTPs), indicators of compromise (IOCs), and potential impacts.
• Use tools such as Splunk Enterprise Security and Microsoft Sentinel to support threat monitoring, analysis, and threat hunting.
• Develop intelligence reports, analytical products, and briefings that communicate cyber threats and adversary capabilities.
• Respond to requests for information and contribute to finished intelligence production.
• Assess cyber threats affecting military systems, software, platforms, and other defense capabilities.
• Evaluate foreign adversary capabilities to exploit, sabotage, subvert, or disrupt commercial off-the-shelf (COTS) and custom-developed software.
• Research software development practices, system services, open-source software, and software-as-a-service (SaaS) to understand potential vulnerabilities and supply chain risks.
• Identify gaps between actual cyber threats and available threat emulation capabilities.
• Support assessments of threat realism, operational effectiveness, suitability, and survivability of military systems.
• Coordinate with intelligence professionals, acquisition teams, industry partners, and other stakeholders.
• Work independently to develop and maintain analytical products while meeting mission requirements and established standards.

Basic Qualifications

• Active DoD Top Secret/Sensitive Compartmented Information (TS/SCI) clearance.
• Experience conducting defense intelligence or all-source intelligence analysis using intelligence tools and data sources to solve complex problems.
• Background in cyber operations or cyber intelligence, with a strong understanding of foreign cyber threats.
• Knowledge of current cyber threat actors, intrusion techniques, attack methods, TTPs, and IOCs.
• Experience researching, analyzing, documenting, and communicating technical information.
• Strong understanding of Intelligence Community Directive (ICD) 203 and ICD 206, including their application to intelligence analysis and reporting.
• Experience writing intelligence reports and developing analytical products and briefings.
• Experience using cyber threat intelligence or security monitoring tools, such as Splunk Enterprise Security or Microsoft Sentinel.
• Experience with threat hunting or analyzing cyber threat data from multiple sources.
• Understanding of the software industry, including programming services, system services, open-source software, and SaaS.
• Strong verbal, written, and briefing skills, with the ability to communicate technical and operational information to diverse audiences.
• Ability to work independently with minimal guidance while managing analytical tasks and priorities.
• Strong attention to detail and organizational skills.

Preferred Qualifications

• Experience developing comprehensive cyber threat assessments, particularly within the net-centric and cyber domains.
• Extensive knowledge of the software development lifecycle (SDLC).
• Understanding of adversarial threats and exploitation risks affecting software and technology supply chains.
• Familiarity with the MITRE ATT&CK framework or similar cyber threat frameworks.
• Knowledge of current and emerging cyber threats, including operational, developmental, and testing-related threat exploitation.
• Experience evaluating cyber threat capabilities and identifying gaps in threat emulation.
• Understanding of the Defense Acquisition Lifecycle.
• Experience supporting the Intelligence Community, Department of Defense, or other national security customers.
• Experience integrating cyber threat intelligence into assessments and recommendations that improve an organization's cybersecurity posture.