Cyber Threat Intelligence Analyst Senior

LTS Inc.; Washington (District of Columbia); On-site; USD 150,000 - 200,000; Full time

Job summary

An established industry player is seeking a Senior Cyber Threat Intelligence Analyst to enhance its cybersecurity posture. In this pivotal role, you will lead the development and management of threat intelligence processes, collaborating with various stakeholders to produce critical intelligence products. Your expertise will be essential in identifying adversarial tactics and gaps in defenses, ensuring the organization is well-prepared against cyber threats. This position offers a unique opportunity to make a significant impact in a dynamic environment, leveraging your analytical skills and experience in cybersecurity operations to drive improvements and inform strategic decision-making.

Qualifications

• 7+ years of experience in cyber threat intelligence or cybersecurity operations.
• Proficient in threat intelligence platforms and data analysis tools.

Responsibilities

• Lead the establishment and optimization of threat intelligence processes.
• Produce timely intelligence products and report on emerging threats.

Skills

Cyber Threat Intelligence

Cybersecurity Operations

Analytical Skills

Communication Skills

Team Leadership

Adversary Tactics Analysis

Data Analysis

Education

Bachelor’s degree in Cybersecurity

Master’s degree in related field

Tools

Threat Intelligence Platforms

SIEM Systems

MITRE ATT&CK Framework

Job description

LTS is seeking an experienced Cyber Threat Intelligence Analyst Senior to support a program within the Department of Commerce. This position will be responsible for optimizing and managing threat intelligence processes, identifying and analyzing adversarial tactics, methodologies, and gaps in cybersecurity defenses. The Senior CTI Analyst will collaborate with internal and external stakeholders to produce critical intelligence products, report on emerging threats, and assist with operational planning to defend against cyber adversaries. This position requires deep expertise in all-source cyber threat intelligence collection, analysis, and reporting, with the ability to translate intelligence into actionable recommendations for cybersecurity operations and decision-making. This position is on-site in Washington D.C.

Responsibilities:

1. Develop and lead the CTI team establishment of the mission, maturity, optimization, task management, and maintenance of threat intelligence processes and documentation.
2. Identify threat tactics, methodologies, gaps, and shortfalls.
3. Provide subject matter expertise to the development of cyber operations specific indicators.
4. Assist in the coordination, validation, and management of all-source collection requirements, plans, and/or activities.
5. Assist in the identification of intelligence collection shortfalls.
6. Monitor and report changes in threat dispositions, activities, tactics, capabilities, objectives, etc. as related to designated cyber operations warning problem sets.
7. Monitor open-source websites for hostile content directed towards organizational or partner interests.
8. Monitor operational environment and report on adversarial activities which fulfill leadership’s priority information requirements.
9. Produce timely, fused, all-source cyber operations intelligence and/or indications and warnings intelligence products (e.g., threat assessments, briefings, intelligence studies, country studies).
10. Provide information and assessments for the purposes of informing leadership and customers; developing and refining objectives; supporting operation planning and execution; and assessing the effects of operations.
11. Provide intelligence analysis and support to designated exercises, planning activities, and time sensitive operations.
12. Provide timely notice of imminent or hostile intentions or activities which may impact organization objectives, resources, or capabilities.
13. Report intelligence-derived significant network events and intrusions.
14. Work closely with planners, intelligence analysts, and collection managers to ensure intelligence requirements and collection plans are accurate and up to date.

Required Skills, Experience & Qualifications:

1. Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related field is required. Master’s degree is preferred.
2. A minimum of 7 years of experience in cyber threat intelligence, cybersecurity operations, or a related field is required.
3. Must be a U.S citizen.
4. Certified Information Systems Security Professional (CISSP), GIAC Cyber Threat Intelligence (GCTI), Certified Ethical Hacker (CEH), or other relevant certifications required.
5. Proven experience in leading or managing a team responsible for cyber threat intelligence collection, analysis, and reporting.
6. Expertise in analyzing adversary tactics, techniques, and procedures (TTPs), and experience utilizing the MITRE ATT&CK Framework or similar methodologies.
7. Proficient in using threat intelligence platforms (e.g., Anomali, ThreatConnect), SIEM systems, and other tools for data analysis and threat reporting.
8. Experience with intelligence collection techniques, including open-source intelligence (OSINT), and all-source intelligence analysis.
9. Strong understanding of cyber threat landscape, including knowledge of adversarial groups, tactics, and techniques.
10. Experience working within the federal government or a similar public-sector organization, especially in the areas of cybersecurity and threat intelligence.
11. Strong analytical skills with the ability to identify trends, correlations, and patterns within large sets of data, providing actionable insights.
12. Excellent written and verbal communication skills, with the ability to produce clear and concise intelligence products and provide executive-level briefings on complex cyber threat issues.
13. Ability to collaborate effectively with cross-functional teams, including cybersecurity operations, planners, and senior leadership to enhance organizational threat defense capabilities.
14. Demonstrated ability to lead teams, provide mentorship, and drive continuous improvement in cyber threat intelligence processes and capabilities.