Cyber Threat Intelligence Analyst

DMI; Crownsville (MD); On-site; USD 92,000 - 113,000; Full time

Benefits offered by this job

401(k) matches

Health benefits

Tuition assistance

Career growth opportunities

Job summary

DMI is seeking a full-time Cyber Threat Intel Analyst to support a state customer in Crownsville, MD. You will conduct all-source analysis, digital forensics, and targeted research to identify and counter criminal cyber actors, and respond to incidents with coordination across teams.

Candidates should have a Bachelor's degree and 5–7 years of related experience, experience with Splunk and threat intel tools, and U.S. citizenship.

Qualifications

• 5-7 years of related work experience; or equivalent experience.
• Ability to develop analytic approaches in incomplete information scenarios.
• Experience with Windows and Linux operating systems and security tools.
• Experience with Splunk, ServiceNow, and threat intel tools.
• Ability to work in a collaborative team environment and take initiative to learn new tools.

Responsibilities

• Conduct all-source analysis, digital forensics, and threat research to identify and counter criminal cyber actors.
• Respond to security incidents, coordinate across sectors, and provide timely updates to leadership.
• Provide information and assessments to inform leadership and users/customers.
• Perform network security analysis to support intrusion detection and improve indicators.
• Contribute to a team of security professionals and coordinate remediation across agencies.
• Ensure security improvements are maintained within configuration management structures.
• On occasion, provide extended shift coverage with minimal travel.
• Monitor security platforms and threat intelligence sources to stay current on threats.
• Analyze impact of new threats and communicate risks to leadership.

Skills

Analytic approaches

Collaboration

Cyber Operations

Security tools

Teamwork

Windows

Linux

Info security concepts

Cyber operations concepts

Malware

Network security basics

Education

Bachelor’s Degree in Computer Science/Computer Engineering, Information/Network Security, Cybersecurity, or related field

Tools

Splunk

ServiceNow

Recorded Future

Anomali ThreatStream

Job description

DMI is a leading provider of digital services and technology solutions, headquartered in Tysons Corner, VA. With a focus on end-to-end managed IT services, including managed mobility, cloud, cybersecurity, network operations, and application development, DMI supports public sector agencies and commercial enterprises around the globe. Recognized as a Top Workplace, DMI is committed to delivering secure, efficient, and cost-effective solutions that drive measurable results. Learn more at www.dminc.com

About The Opportunity

DMI, LLC is seeking a full time Cyber Threat Intel Analyst to support a state customer.

Duties And Responsibilities

• Conduct all-source analysis, digital forensics, and targeted research to identify, monitor, assess, and counter the threat posed by criminal cyber actors. Utilize threat intelligence platforms and tools to mitigate potential threats to users, networks, and data.
• Respond to computer security incidents in compliance with Information Security Policies and Industry Best Practices. Coordinate the efforts of and provide timely updates to multiple sectors and business units during incident response. Additionally, the candidate will provide security related recommendations to the team as threat events unfold.
• Provide information and assessments for the purposes of informing leadership and users/customers.
• Perform network security analysis in support of Intrusion Detection operations including the development and enrichment of indicators used to enhance the network security posture.
• Contribute to a team of information security professionals analyzing threat data, writing reports, briefing event details to leadership, and coordinating remediation activities across multiple State agencies.
• Ensures technical security improvements are effective and maintained within configuration management structures.
• Ensures technology employed by the Security Monitoring Team compliments operational processes.
• On occasion, provide extended shift coverage with minimal travel required.
• Monitor various information security related platforms and forums including Recorded Future, Anomali ThreatStream, SANS Internet Storm Center, Krebs on Security, and other forums and mailing lists to stay up to date on current network threats, attack methodologies and trends.
• Analyze the potential impact of new threats and exploits and communicate risks to relevant leadership and business units.
• Monitor the State of Maryland networks to find anomalous or malicious activity using various analytical methods and Security Event and Incident Monitoring (SEIM) tools in a fast-paced operational environment.

Qualifications

Education and Years of Experience

• Bachelor’s Degree in Computer Science/Computer Engineering, Information/Network Security, Cybersecurity, or related field with 5-7 years of related work experience; OR equivalent experience in lieu of degree.

Required Skills & Certifications

• Ability to develop or recommend analytic approaches or solutions to problems and situations for which information is incomplete or for which no precedent exists.
• Ability to function in a collaborative environment, seeking continuous consultation with other analysts and experts—both internal and external to the organization—to leverage analytical and technical expertise.
• Coursework and previous experience directly related to Cyber Operations environment.
• Experience with Splunk, ServiceNow, Recorded Future, Anomali ThreatStream, and other cybersecurity tools as required.
• Ability to work in a team environment ability to taking initiative to understand and master new operating systems, security applications and open-source tools.
• Knowledge with Windows and Linux operating systems and common applications, working knowledge of and experience in detecting malicious code and methods of infection (ports, attachments, etc.).
• Knowledge of information systems security concepts and technologies; network architecture and tools; general database concepts; document management; hardware and software troubleshooting; intrusion tools; and open-source alternatives.
• Knowledge of fundamental cyber operations concepts, terminology/lexicon (i.e., environment preparation, cyber-attack, cyber defense), principles, capabilities, limitations, and effects.
• Knowledge of common computer/network infections (virus, Trojan, etc.) and methods of infection (ports, attachments, etc.).
• Knowledge of the basics of network security (e.g., encryption, firewalls, authentication, honey pots, perimeter protection).

Additional Requirements

• At least one certification from the CSSP Incident Responder Category (CEH, CFR, CCNA Cyber Ops, CCNA-Security, CHFI, CySA+ **, GCFA, GCIH, SCYBER, PenTest+)

Successful completion of a Fingerprint background investigation.

Citizenship Status Required

Must be a U.S. Citizen

Physical Requirements

No physical requirements for this position.

Location

Crownsville, MD (on-site)

Minimum Salary Rate

$102,437

Median Salary Rate

$128,046

Working at DMI

• Do What’s Right – We lead with honesty and integrity.
• Own the Outcome – We take responsibility and deliver.
• Deliver for Our Customers – We are relentless about delivering value.
• Think Bold, Act Smart – We innovate with purpose.
• Win Together – We collaborate and celebrate our success.

These values aren’t just ideals—they show up in how we support every part of your well-being:

• Convenience/Concierge – Virtual health visits, commuter perks, pet insurance, and entertainment discounts that make life easier.
• Development – Annual performance reviews, tuition assistance, and internal career growth opportunities to help you thrive.
• Financial – Generous 401(k) matches, life and disability insurance, and financial wellness tools to support your future.
• Recognition – Annual awards, service anniversaries, referral bonuses, and peer-to-peer shoutouts that spotlight your achievements.
• Wellness – Healthcare coverage, wellness programs, flu shots, and biometric screenings to support your health.

DMI values employees for their talents and contributions, and we take pride in helping our customers achieve their goals. Because when we live our values, we all win together.

Applicants selected may be subject to a government security investigation and must meet eligibility requirements for access to classified information. US citizenship may be required for some positions.