Cybersecurity Operations Analyst & Cyber Threat Intelligence Lead

The Aerospace Corporation; Colorado Springs (CO); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Comprehensive health care

Paid holidays

Relocation assistance

Job summary

The Aerospace Corporation in Colorado Springs seeks an experienced cybersecurity professional to lead our Cyber Threat Intelligence program. This role focuses on CTI strategy, threat intelligence collection, and producing advanced intelligence products for leadership and operations.

As a SOC subject matter expert, you will mentor junior analysts, manage CTI platforms, and drive detection workflows. On-site, full-time role with a strong emphasis on incident response and adversary analysis.

Qualifications

• Bachelor's degree or equivalent experience in cybersecurity or related field.
• 3-5 years in security operations, threat analysis, incident response, or SOC environments.
• 3+ years in cyber threat intelligence analysis, production, and program management.

Responsibilities

• Lead Aerospace's CTI program, establishing strategy, processes, and capabilities.
• Develop CTI roadmap, define intelligence requirements (PIRs/IRs), and align with organizational risk priorities.
• Produce strategic, operational, and tactical intelligence products including threat assessments and adversary profiles.
• Serve as Tier 2/3 escalation point for complex security alerts and incidents.
• Lead incident response for escalated events and develop detection rules.

Skills

Tier 2/3 SOC analyst

SIEM platforms

Threat intelligence platforms (TIP)

OSINT tools

MITRE ATT&CK framework

Threat intelligence analysis

Python

PowerShell

threat hunting

Education

Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Intelligence Studies

Tools

Google SecOps

QRadar

LogRhythm

ArcSight

Job description

The Aerospace Corporation is the trusted partner to the nation’s space programs, solving the hardest problems and providing unmatched technical expertise. As the operator of a federally funded research and development center (FFRDC), we are broadly engaged across all aspects of space— delivering innovative solutions that span satellite, launch, ground, and cyber systems for defense, civil and commercial customers. When you join our team, you’ll be part of a special collection of problem solvers, thought leaders, and innovators. Join us and take your place in space. The Aerospace Corporation seeks an experienced cybersecurity professional to serve as a Tier 2/3 Cyber Operations Analyst and Lead our Cyber Threat Intelligence (CTI) program. You'll handle escalated security events, conduct advanced threat analysis, lead complex investigations, and own all aspects of threat intelligence collection, analysis, production, and dissemination. As a SOC subject matter expert, you'll leverage cutting-edge security tools and deep technical expertise to identify, analyze, and mitigate advanced cyber threats while mentoring junior analysts.

Work Model

The selected candidate will be required to work full-time, on-site at our facility in Colorado Springs, CO.

What You'll Be Doing

Cyber Threat Intelligence Program Leadership

• Lead Aerospace's CTI program, establishing strategy, processes, and capabilities
• Develop CTI roadmap, define intelligence requirements (PIRs/IRs), and align with organizational risk priorities
• Manage relationships with external threat intelligence partners, ISACs/ISAOs, and government agencies
• Produce strategic, operational, and tactical intelligence products including threat assessments, adversary profiles, and campaign analysis
• Conduct all-source intelligence analysis on threat actors and emerging threats targeting aerospace/defense
• Manage threat intelligence platforms (TIP) and establish intelligence workflows
• Track and profile APT groups and adversaries relevant to Aerospace's threat landscape
• Brief leadership on threat trends, emerging risks, and intelligence-driven recommendations
• Establish metrics demonstrating CTI program value and effectiveness

Security Operations & Incident Response

• Serve as Tier 2/3 escalation point for complex security alerts and incidents
• Conduct deep-dive investigations into sophisticated threats and APTs
• Perform advanced threat hunting leveraging intelligence to guide hypotheses
• Analyze security alerts from SIEM, IDS, EDR, and other security technologies
• Correlate data from multiple sources to reconstruct attack timelines and identify compromise scope
• Lead incident response for escalated events, coordinating containment and remediation
• Integrate threat intelligence into detection workflows and develop advanced detection rules
• Analyze malware, scripts, and attacker tools to understand adversary TTPs
• Mentor Tier 1 analysts and develop their analytical skills
• Create advanced playbooks, investigation workflows, and technical documentation
• Generate detailed technical reports and executive summaries on complex threats
• Provide after-hours escalation support for critical incidents as needed

Minimum Requirements for Information Security Staff III

• Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Intelligence Studies, or equivalent experience
• 3-5 years in security operations, threat analysis, incident response, or SOC environments
• 3+ years in cyber threat intelligence analysis, production, and program management
• Proven experience building or managing a CTI program
• Strong background in intelligence analysis methodologies, intelligence cycle (collection, processing, analysis, dissemination) & structured analytic techniques
• Experience as Tier 2/3 SOC analyst handling complex security incidents
• Experience producing intelligence products for various audiences (technical, operational, executive) and briefing stakeholders
• Ability to analyze threat actors, track campaigns, and assess adversary capabilities
• Advanced proficiency with SIEM platforms (Google SecOps, QRadar, LogRhythm, ArcSight, or similar) including custom query development
• Hands‑on experience with threat intelligence platforms (TIP) and OSINT tools
• Deep understanding of network protocols, traffic analysis, and advanced attack techniques
• Extensive log analysis and event correlation experience
• Strong knowledge of Windows/Linux systems, forensic artifacts, and attacker techniques
• Expertise with EDR platforms and advanced endpoint analysis
• Expert-level understanding of MITRE ATT&CK framework
• Experience with threat intelligence frameworks (Diamond Model, Cyber Kill Chain)
• Advanced network packet analysis skills (Wireshark, tcpdump)
• Ability to analyze malicious scripts, PowerShell commands, and malware behavior
• Ability to work under pressure and manage multiple complex investigations
• Ability to obtain and maintain US Secret clearance (US citizenship required)

Additional Requirements for Information Security Staff IV

• 5-7 years in security operations, threat analysis, incident response, or SOC environments
• 5+ years in cyber threat intelligence analysis, production, and program management

How You Can Stand Out

Certifications

• GCTI, CTIA, GCIA, GCIH, GCFA, GNFA, GMON, CySA+, CISSP, etc.

• Prior experience as CTI Lead, Manager, or Program Owner Government, military, or defense intelligence background with formal training
• Experience developing intelligence requirements and collection strategies
• Advanced proficiency with ThreatConnect, Anomali, MISP, Recorded Future OSINT research, dark web monitoring, and underground forum analysis experience
• Malware analysis and reverse engineering skills
• Published threat intelligence research or conference presentations
• Scripting proficiency (Python, PowerShell, Bash) for automation and analysis
• Experience with SOAR platforms Cloud security operations experience (AWS, Azure, GCP) Experience in classified or high-security environments Network security monitoring tools experience (Zeek, Suricata, Snort) Red team/purple team exercise participation Analyst mentoring and training experience Knowledge of compliance frameworks (NIST 800-53, 800-171, CMMC) Familiarity with IC standards (ICD 203, ICD 206)

Benefits

• Comprehensive health care and wellness plans
• Paid holidays, sick time, and vacation
• Standard and alternate work schedules, including telework options
• 401(k) Plan — Employees receive a total company-paid benefit of 8%, 10%, or 12% of eligible compensation based on years of service and matching contributions; employees are immediately eligible and vested in the plan upon hire
• Flexible spending accounts
• Variable pay program for exceptional contributions
• Relocation assistance
• Professional growth and development programs to help advance your career
• Education assistance programs

An inclusive work environment built on teamwork, flexibility, and respect We are all unique, from various backgrounds and all walks of life, yet one thing bonds all of us to each other—the belief that we can make a difference. This core belief empowers us to do our best work at The Aerospace Corporation.

Leadership Competencies

• Operate Strategically
• Lead Change
• Engage with Impact
• Foster Innovation
• Deliver Results

Ways We Reward Our Employees

During your interview process, our team will provide details of our industry-leading benefits.

Equal Opportunity Commitment

The Aerospace Corporation is an equal opportunity employer. All qualified applicants will receive consideration for employment and will not be discriminated against on the basis of race, age, sex (including pregnancy, childbirth, and related medical conditions), sexual orientation, gender, gender identity or expression, color, religion, genetic information, marital status, ancestry, national origin, protected veteran status, physical disability, medical condition, mental disability, or disability status and any other characteristic protected by state or federal law. If you’re an individual with a disability or a disabled veteran who needs assistance using our online job search and application tools or need reasonable accommodation to complete the job application process, please contact us by phone at 310.336.5432 or by email at [e-mail] . You can also review Know Your Rights: Workplace Discrimination is Illegal.

Right Place

The Aerospace Corporation has over 26 locations nationwide, which allows us to build a workforce that will nurture the best ideas, and generate the most novel innovations and solutions to our nation’s toughest space enterprise challenges. Right Path Aerospace covers all stages of the space lifecycle, from concept to operations. We believe our people are our most valuable resource and that’s why we propel our employees forward in their careers through ongoing education, training, and professional development. Right Purpose We can all serve a mission much greater than ourselves, and at Aerospace that is exactly what we do. By hiring the industry’s most preeminent scientists and engineers, Aerospace advances emerging technologies that protect some of the most critical missions on Earth and above it.

Security Clearance

Aerospace employees working in organizations with technical responsibilities are required to obtain a Security Clearance. U.S. citizenship is required for those positions.