Cyber Threat Intelligence Analyst

Maximus; San Antonio (TX); On-site; USD 120,000 - 180,000; Full time

Job summary

Maximus is hiring a Cyber Threat Intelligence Analyst for an onsite role in San Antonio, TX. The position requires an active TS/SCI clearance and a related bachelor’s degree, with 10+ years of cyber threat intelligence experience.

You will collect, analyze, and disseminate intelligence from classified and open sources, identify new threats and TTPs, and develop IOCs and brief leadership and technical teams with actionable reports.

Qualifications

• Active TS/SCI security clearance.
• Bachelor’s degree in Intelligence Studies, Cybersecurity, or related technical field.
• 10+ years of cyber threat intelligence experience.
• DoD 8140 certifications for DCWF 624: GCTI OR CTIH.
• Experience with ThreatConnect, Recorded Future and OSINT collection tools.

Responsibilities

• Collect, analyze, and disseminate cyber threat intelligence from classified and open sources.
• Identify emerging threats, vulnerabilities, and adversary TTPs.
• Develop indicators of compromise (IOCs) and intelligence products.
• Develop reports and deliver intelligence briefings to leadership and technical teams.

Skills

Security clearance

Cyber threat intelligence

Analytical thinking

Education

Bachelor’s degree in Intelligence Studies, Cybersecurity, or related field

DoD 8140 certifications (GCTI or CTIH)

Tools

ThreatConnect

Recorded Future

OSINT collection tools

CrowdStrike Falcon X

MITRE ATT&CK

Job description

Cyber Threat Intelligence Analyst

Maximus is looking to hire a Cyber Threat Intelligence Analyst.

This position is onsite in San Antonio, TX, and requires an active TS/SCI security clearance.

Maximus TCS (Technology and Consulting Services) Internal Job Profile Code: TCS053, T5, Band 8

Job-Specific Essential Duties and Responsibilities

• Collect, analyze, and disseminate cyber threat intelligence from classified and open sources.
• Identify emerging threats, vulnerabilities, and adversary TTPs.
• Develop indicators of compromise (IOCs) and intelligence products.
• Develop reports and deliver intelligence briefings to leadership and technical teams.

Job-Specific Minimum Requirements

• Active Top Secret / SCI (TS/SCI) security clearance.
• Bachelor’s degree in Intelligence Studies, Cybersecurity, or related technical field.
• 10+ years of cyber threat intelligence experience.
• Required DoD 8140 certifications for DCWF 624: GCTI OR CTIH.
• Experience with ThreatConnect, Recorded Future and OSINT collection tools.

Preferred Skills and Qualifications

• Expertise with the MITRE ATT&CK framework.
• Experience with CrowdStrike Falcon X.
• Prior service in DoW cyber intelligence organizations.

EEO Statement

Maximus is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, religion, sex, age, national origin, disability, veteran status, genetic information and other legally protected characteristics.

Pay Transparency

Maximus compensation is based on various factors including but not limited to job location, a candidate’s education, training, experience, expected quality and quantity of work, required travel (if any), external market and internal value analysis including seniority and merit systems, as well as internal pay alignment. Annual salary is just one component of Maximus’s total compensation package. Other rewards may include short- and long-term incentives as well as program-specific awards. Additionally, Maximus provides a variety of benefits to employees, including health insurance coverage, life and disability insurance, a retirement savings plan, paid holidays and paid time off. Compensation ranges may differ based on contract value but will be commensurate with job duties and relevant work experience. An applicant’s salary history will not be used in determining compensation. Maximus will comply with regulatory minimum wage rates and exempt salary thresholds in all instances.

Accommodations

Maximus provides reasonable accommodations to individuals requiring assistance during any phase of the employment process due to a disability, medical condition, or physical or mental impairment. If you require assistance at any stage of the employment process—including accessing job postings, completing assessments, or participating in interviews—please contact People Operations at [e-mail].