Cyber Threat Analyst

Phase2 Technology; Charlottesville (VA); On-site; USD 61,900 - 141,000; Full time

Job summary

Phase2 Technology is seeking a Cyber Threat Analyst to investigate cyber threats impacting the U.S. Army. The role involves evaluating intelligence, producing technical reports, and utilizing various intelligence methodologies. Candidates should have 5+ years of experience in cyber threat intelligence and a TS/SCI clearance. The salary ranges from $61,900 to $141,000 annually, and the position may require remote, hybrid, or onsite work depending on project requirements.

Qualifications

• 5+ years of experience in cyber threat intelligence, all-source intelligence, or military intelligence.
• Ability to tailor technical information for tactical, operational, and strategic audiences.
• TS/SCI clearance.

Responsibilities

• Use the intelligence cycle to evaluate cyber threats per IC standards.
• Produce technical intelligence combining various intelligence types.
• Create finished intelligence reports tailored for different audiences.

Skills

Cyber threat intelligence

All-source intelligence

Military intelligence

SIGINT

HUMINT

OSINT

GEOINT

Technical writing

Education

Bachelor's degree

Bachelor's degree in Computer Science, Electrical Engineering, or Computer Engineering

Tools

MITRE ATT&CK Framework

Cyber Kill Chain

Job description

Job Number: R0239754

Cyber Threat Analyst

The Opportunity: As a cyber threat intel analyst, you know the key to detecting and deterring malicious activity is quality risk‑based intel that maps to tactical behavior. At Booz Allen, you can apply your expertise to investigate the most pressing cyber threats impacting the U.S. Army. This is your chance to take on the adversary's perspective, identify their motivations, and recommend ways to harden systems, reduce their attack surface, and thwart malicious actors.

Responsibilities

• Use the intelligence cycle to evaluate cyber threats that follow Intelligence Community (IC) standards, specifically ICD 203 and ID 206, to inform DoW and IC partners.
• Understand U.S. Army, Combatant Command (COCOM), and DoW structures to identify cyber threats to ground force modernization and operation.
• Produce technical intelligence by combining SIGINT, HUMINT, and OSINT to assess the impact of cyber threats on foreign military capabilities.
• Combine multiple intelligence types, including SIGINT, HUMINT, OSINT, and GEOINT, to create finished intelligence reports.
• Tailor technical information for tactical, operational, and strategic audiences.

Qualifications

• 5+ years of experience in cyber threat intelligence, all-source intelligence, or military intelligence.
• Experience with writing and briefing.
• Experience applying ICD 203 and ICD 206 to intelligence products.
• Experience combining multiple intelligence types, including SIGINT, HUMINT, OSINT, and GEOINT, to create finished intelligence reports.
• Ability to tailor technical information for tactical, operational, and strategic audiences.
• TS/SCI clearance.
• Bachelor's degree.

Nice If You Have

• Experience with JP 3-12 and JP 5-0.
• Experience using the MITRE ATT&CK Framework and the Cyber Kill Chain to analyze adversary intrusions.
• Experience with U.S. Army organizational structure and the relationship between COCOMs and the DoW.
• Knowledge of U.S. Army ground systems and C4 networks.
• Knowledge of the DoW acquisition lifecycle.
• Ability to assess an adversary's intent, opportunity, and capability to deny, disrupt, degrade, or destroy them.
• Bachelor's degree in Computer Science, Electrical Engineering, or Computer Engineering.
• DoW 8140v2 Intermediate or Advanced Certification.

Clearance

Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; TS/SCI clearance is required.

Compensation

Salary range: $61,900.00 to $141,000.00 (annualized USD). The posting will close within 90 days from the posting date.

Work Model

• Remote – may require occasional in‑person work at a Booz Allen or customer facility.
• Hybrid – expected to work from a Booz Allen facility frequently; may also be required to work from or visit a customer facility.
• Onsite – work will primarily be performed at a Booz Allen office or customer facility.

Commitment to Non-Discrimination

All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, local, or international law.