Cyber Threat Intelligence Analyst

MANTECH; Miami (FL); On-site; USD 120,000 - 160,000; Full time

Job summary

MANTECH in Doral, FL seeks a Cyber Threat Intel Analyst to join our team on-site. You will collect, analyze, and disseminate cyber threat intelligence, evaluate attacker TTPs with MITRE ATT&CK, and produce actionable indicators to support proactive network defense.

Collaborating with incident responders and cybersecurity leadership, you will monitor enterprise telemetry, maintain intel baselines, and drive improvements to detection capabilities and intelligence workflows.

Qualifications

• Proven experience conducting technical cyber threat analysis and threat intel reporting.
• Experience mapping adversary TTPs and using MITRE ATT&CK in assessments.
• Familiarity with TIP, OSINT, and IOC data for threat intel.
• Ability to maintain baselines, documentation controls, and threat repositories.

Responsibilities

• Collect, analyze, and synthesize cyber threat intel from multiple sources.
• Evaluate threat actor TTPs using MITRE ATT&CK to assess impact.
• Develop threat assessments, intelligence briefings, and indicators.
• Collaborate with incident responders and cybersecurity leadership to mitigate threats.
• Monitor network telemetry and security feeds to track adversary activity.
• Maintain threat intel baselines and operational dissemination logs.
• Recommend process improvements to enhance threat detection and workflows.

Skills

Technical threat analysis

TTP mapping

Threat intel reporting

TIP OSINT IOCs

Documentation & briefings

Education

Bachelor's degree in Cybersecurity/related field

Master's degree (optional)

Associate's degree with experience

High school diploma with extensive experience

Tools

TIP platforms

OSINT tools

IOCs data sources

Job description

MANTECH seeks a motivated, career and customer-oriented Cyber Threat Intel Analyst to join our team in Doral, FL.

Responsibilities Include But Are Not Limited To

• Collecting, analyzing, and synthesizing cyber threat intelligence from multiple all-source intelligence repositories and technical sensors.
• Evaluating threat actor tactics, techniques, and procedures (TTPs) using the MITRE ATT&CK framework to assess potential operational impacts.
• Developing threat assessments, intelligence briefings, and actionable cyber threat indicators to support proactive network defense.
• Collaborating with cross-functional technical teams, incident responders, and cybersecurity leadership to mitigate identified cyber threats.
• Monitoring enterprise network telemetry and security event feeds to track adversary activity and emerging threat vectors.
• Maintaining threat intelligence baselines, intelligence repositories, and operational dissemination logs.
• Recommending and implementing continuous process improvements to enhance threat detection capabilities and intelligence workflows.

Minimum Qualifications

• Bachelor’s degree in Cybersecurity, Intelligence Studies, Computer Science, or a related field with 5+ years of experience in cyber threat intelligence or cyber defense analytics.
  • OR a master’s degree and 3+ or more years of relevant experience
  • OR an associate’s degree and 7+ or more years of relevant experience
  • OR a high school diploma and 9+ or more years of relevant experience
• Proven experience conducting technical cyber threat analysis, adversary TTP mapping, and threat intelligence reporting.
• Strong background utilizing Threat Intelligence Platforms (TIP), open-source intelligence (OSINT), and technical indicators of compromise (IOCs).
• Experience maintaining intelligence baselines, documentation controls, and threat tracking repositories.
• Experience creating, maintaining, and communicating complex technical documentation and executive intelligence briefings.

Preferred Qualifications

• Relevant professional certifications such as GIAC Cyber Threat Intelligence (GCTI), Certified Threat Intelligence Analyst (CTIA), or CompTIA CySA+.
• Prior experience supporting U.S. Military Command operations, Combatant Command intelligence centers, or Department of Defense cyber operations.
• Familiarity with diamond model analysis, malware analysis fundamentals, and automated threat feeds.
• Demonstrated ability to collaborate effectively across multi-disciplinary engineering teams in fast-paced operational environments.

Clearance Requirements

• Must hold a current/active TS/SCI security clearance.

Physical Requirements

• Must be able to remain in a stationary position 50%.
• Needs to occasionally move about inside the office to access file cabinets, office machinery, etc.
• Frequently communicates with co-workers, management, and customers, which may involve delivering presentations. Must be able to exchange accurate information in these situations.