Cyber Threat Intelligence Analyst - TS/SCI | SOC/CIRT Expert

Altus Consulting; Herndon (VA); On-site; USD 120,000 - 150,000; Full time

Job summary

Altus Consulting is seeking skilled Cyber Threat Intelligence Analysts to support a mission-focused CSOC and CIRT within a highly secure customer environment. The role involves transforming security telemetry into intelligence to strengthen detection, incident response, and cyber defense decision-making.

Candidates should have hands-on ops experience, strong analytical skills, and the ability to bridge cybersecurity operations with threat intelligence.

Qualifications

• Active TS/SCI clearance with polygraph required
• 3–5+ years in SOC/Cyber Defense/IR environment
• Hands-on experience with SIEM, SOAR, IDS/IPS, network monitoring, endpoint security
• Experience with Splunk Enterprise Security, Elastic/ELK Stack, or comparable analytics platforms
• Experience conducting cyber threat analysis and producing actionable intelligence products
• Strong understanding of adversary TTPs
• Experience supporting incident response, cyber defense, or threat hunting activities
• Experience developing dashboards, reports, and security visualizations
• Experience writing technical documentation, SOPs, or playbooks
• Familiarity with cloud security monitoring in AWS, Azure, or GCP
• Experience in Intelligence Community/DoD/Federal cybersecurity environments

Responsibilities

• Analyze security data from SIEM, SOAR, IDS/IPS, network monitoring, endpoint detection, and other cybersecurity platforms
• Identify, track, and assess adversary TTPs using MITRE ATT&CK
• Correlate threat intelligence with security events to improve detection, triage, threat hunting, and incident response activities
• Produce actionable intelligence reports, threat briefings, cyber situational awareness products, and adversary assessments for operational stakeholders
• Develop threat profiles and intelligence products that support security operations and cyber defense decision‑making
• Integrate cyber threat intelligence into daily SOC and incident response workflows
• Support incident investigations by providing contextual intelligence and adversary attribution where appropriate
• Collaborate with security engineers, analysts, responders, and leadership to operationalize cyber threat intelligence
• Identify intelligence gaps and recommend improvements to detection, monitoring, and response capabilities
• Develop executive and operational dashboards using Splunk, Elastic, or related analytics platforms
• Create visualizations that communicate emerging threats, attack trends, threat actor activity, and operational metrics
• Develop and maintain cyber defense playbooks, SOPs, and analytical methodologies
• Document threat hunting processes, incident response procedures, and CTI workflows
• Assist with automating intelligence collection, enrichment, analysis, and reporting activities
• Support continuous improvement initiatives that enhance cyber defense operations and mission effectiveness

Skills

Analytical thinking

Threat analysis

MITRE ATT&CK knowledge

Dashboard reporting

Threat hunting

Technical documentation

DevSecOps concepts

Automation scripting (Python/PowerShel

Cloud security monitoring (AWS/Azure/G

Detection engineering content

Strong communication

Translate findings to stakeholders

Government/federal experience

Tools

Splunk Enterprise Security

Elastic/ELK Stack

MISP

ThreatConnect

Anomali

Recorded Future

Job description

Altus Consulting is seeking skilled Cyber Threat Intelligence Analysts to support a mission-focused CSOC and CIRT within a highly secure customer environment. The role involves transforming security telemetry into intelligence to strengthen detection, incident response, and cyber defense decision-making.

Candidates should have hands-on ops experience, strong analytical skills, and the ability to bridge cybersecurity operations with threat intelligence.