Cyber Threat Intelligence Analyst (DoD/Army)

Indigo IT LLC; Fort Bragg (NC); On-site; USD 95,000 - 150,000; Full time

Benefits offered by this job

Medical benefits

Dental benefits

Vision benefits

401(k) with company match

Life & disability

FSA

PTO

Paid holidays

Education assistance

Training programs

Bonuses

Recognition programs

Job summary

Indigo IT LLC is seeking a Cyber Threat Intelligence Analyst to collect, analyze, and disseminate actionable intelligence supporting an Army contract. You will produce briefings for commanders and cyber leadership, and develop intelligence-driven detection objectives for Blue Team activities.

The role emphasizes collaboration with Purple Team, signature development, and threat hunting, leveraging MITRE ATT&CK and ATT&CK-aligned methodologies to strengthen defense postures.

Qualifications

• 5+ years experience performing Cyber Threat Intelligence analysis within a DoD, Intelligence Community, or federal cybersecurity environment.
• Strong understanding of nation-state and advanced persistent threat (APT) actors, malware analysis, and cyber threat reporting.
• Experience with threat intelligence platforms, SIEM technologies, detection engineering, and indicator management.
• Knowledge of MITRE ATT&CK, Cyber Kill Chain, STIX/TAXII, and common threat intelligence methodologies.
• Experience developing or validating detection signatures, YARA rules, Snort/Suricata signatures, or SIEM detection content is preferred.
• Excellent analytical, written, and verbal communication skills with experience producing executive and technical intelligence products.
• Active DoD Secret clearance with TS/SCI eligibility

Responsibilities

• Collect, analyze, and correlate cyber threat intelligence from classified and open-source reporting to identify emerging threats, adversary activity, and attack trends.
• Produce timely intelligence reports, threat assessments, and briefings for supported commanders, RCC, ARCYBER, and cybersecurity leadership.
• Provide actionable intelligence to support Blue Team detection engineering, threat hunting, and incident response activities.
• Partner with Purple Team personnel to develop intelligence-driven assessment objectives and adversary emulation scenarios.
• Develop, review, validate, and maintain detection signatures and indicators of compromise (IOCs), ensuring proper syntax, functionality, and minimal false positives before deployment.
• Support continuous improvement of enterprise detection capabilities by reviewing and refining signature content, detection logic, and threat indicators.
• Conduct signature development and testing within isolated environments prior to production implementation.
• Track adversary tactics, techniques, and procedures (TTPs) using MITRE ATT&CK and provide recommendations to strengthen defensive capabilities.
• Maintain awareness of emerging cyber threats and communicate relevant intelligence to stakeholders across the cybersecurity enterprise.

Skills

Cyber Threat Intelligence

DoD/Federal cybersecurity

Threat hunting

MITRE ATT&CK

Security clearance

Tools

Threat intel platforms

SIEM

Detection engineering

Job description

Indigo IT LLC is seeking a Cyber Threat Intelligence Analyst to collect, analyze, and disseminate actionable intelligence supporting an Army contract. You will produce briefings for commanders and cyber leadership, and develop intelligence-driven detection objectives for Blue Team activities.

The role emphasizes collaboration with Purple Team, signature development, and threat hunting, leveraging MITRE ATT&CK and ATT&CK-aligned methodologies to strengthen defense postures.