Cyber Threat Intelligence Lead

Strategic Operational Solutions, Inc; Fort Bragg (NC); On-site; USD 120,000 - 150,000; Full time

Job summary

Strategic Operational Solutions (STOPSO) is seeking a CTI Lead and Senior Threat Warning Analyst to support the USARC DCOMSS program at Fort Bragg, NC. Lead cyber threat intelligence and threat-warning operations, including analysis, production, and fusion with defensive cyber operations.

The role requires active TS/SCI clearance, 5+ years of relevant experience, and experience in all-source and OSINT analysis for SCI work. On-site work in a secure government facility is expected.

Qualifications

• Minimum 5 years of documented relevant CTI/intelligence experience in a DoD or enterprise IT setting.
• Specialized operational experience in CTI/intelligence, all-source, and OSINT reporting and fusion for SCI work.
• Meet DoDM 8140.03 qualification requirements for every assigned work role; maintain residential qualification and continuing learning.

Responsibilities

• Direct CTI collection, correlation, analysis, and threat-warning priorities.
• Oversee CTI reports, IOC packages, RFIs and trend products with analytic review.
• Lead all-source and OSINT analysis, reporting, and fusion for SCI functions.
• Coordinate CTI support to incident response, threat hunts, detection content, assessments, and exercises.
• Maintain production standards, source records, classification markings, and dissemination controls.
• Manage CTI procedures, internal training, and analyst development.

Skills

All-source analysis

OSINT analysis

IC reporting

Fusion

Threat intelligence

CTI leadership

Education

DCWF 171 Cyber Threat Intelligence Analyst – Advanced proficiency

DCWF 141 All-Source Analyst – Intermediate proficiency

DoDM 8140.03 qualification requirements

Tools

MITRE ATT&CK

Intelligence repositories

Reporting systems

Analytic collaboration tools

Job description

Position Summary

Strategic Operational Solutions (STOPSO) is seeking a CTI Lead and Senior Threat Warning Analyst to support the U.S. Army Reserve Command (USARC) Defensive Cyberspace Operations Mission Support Services (DCOMSS) program at Fort Bragg, North Carolina. Lead cyber threat intelligence and threat-warning operations, including intelligence requirements, all-source and OSINT analysis, production, and fusion with defensive cyber operations. The lead ensures accurate and appropriately disseminated intelligence products.

Essential Duties and Responsibilities

• Direct CTI collection, correlation, analysis, intelligence requirements, and threat-warning priorities.
• Oversee Threat Intelligence Reports, IOC packages, RFI responses, and trend products with analytic review.
• Lead all-source and OSINT analysis, reporting, and fusion for authorized SCI functions.
• Coordinate CTI support to incident response, threat hunts, detection content, assessments, and exercises.
• Maintain production standards, source records, confidence statements, classification markings, and dissemination controls.
• Manage CTI procedures, internal training, signature-development coordination, and analyst development.
• Perform other duties as assigned consistent with the position's responsibilities, qualifications, clearance, and authorized scope.

Education and Experience

• Minimum 5 years of documented relevant experience. Documented specialized operational experience in the CTI/intelligence functional area in a DoD or enterprise IT setting; all-source and OSINT analysis, intelligence reporting, and IC reporting/fusion for SCI work.
• DoD Cyber Workforce Framework (DCWF) 171, Cyber Threat Intelligence Analyst, Advanced proficiency, and DCWF 141, All-Source Analyst, Intermediate proficiency.
• Meet DoDM 8140.03 qualification requirements for every assigned work role and proficiency through an approved education, training, certification, or authorized experience route before independent cyber work. Document work-role appointment and qualification; maintain required residential qualification and continuing learning. A higher-level approved option may qualify the same role at a lower level.

Knowledge, Skills and Abilities

• Demonstrated knowledge of All-source and OSINT analysis, intelligence reporting, IC reporting and fusion, intelligence requirements, and CTI support to defensive operations.
• Proficiency with approved intelligence repositories, OSINT sources, reporting systems, MITRE ATT&CK, and analytic collaboration tools appropriate to assigned duties and approved access.
• Ability to produce accurate records, explain findings and decisions, and follow approved procedures and security requirements.
• Strong written and verbal communication skills and sound judgment when coordinating with technical staff and Government stakeholders.
• Strong organizational skills, confidentiality, and ability to work independently and collaboratively in a mission-focused environment.

Preferred Qualifications

• Experience leading CTI production and SCI reporting in a DoD or intelligence environment.
• Relevant DoD or enterprise IT experience with mission tooling and operational reporting.

Security Clearance

Active TS/SCI clearance and ability to maintain required SCI indoctrination and assigned system access. U.S. citizenship is required.

Supervisory Responsibilities

Leads CTI personnel, assigns analytic work, reviews products, and provides coaching and performance input consistent with company authority.

Work Environment and Physical Requirements

Work is primarily performed on site in a secure Government facility using computer systems and standard office equipment. The employee must be able to perform sustained computer-based analysis or coordination, communicate effectively, and support operational activities outside standard business hours when assigned. Mission-essential watch roles may include shifts, weekends, and holidays.

Reasonable accommodations may be made to enable qualified individuals with disabilities to perform the essential functions of the position.

Travel

Occasional local, CONUS, or OCONUS travel may be required for authorized mission activities, exercises, assessments, or conferences.

Disclaimer

This job description describes the general nature and level of work expected for this position. It is not intended to be a complete list of all duties, responsibilities, or qualifications. Responsibilities may change based on business, contractual, or organizational needs.

Nothing in this job description alters the at-will employment relationship, where applicable.

We are an equal opportunity employer and do not discriminate based on protected characteristics.