Lead Cyber Threat Intelligence Analyst (Remote)

Dragos; Washington (District of Columbia); On-site; USD 150,000 - 180,000; Full time

Job summary

Dragos is seeking a Cyber Threat Intelligence Analyst to support a federal customer. You will partner with the client's Security and Intel teams, researching threats against critical infrastructure and delivering tailored intelligence briefings, reports, and guidance.

Onsite work with the customer is required, with a remote-first, mission-driven culture across North America and beyond. You will analyze ICS/OT threats, perform threat hunting, and craft actionable intelligence products while

Qualifications

• Active Top Secret (TS) Security Clearance required.
• Willing and able to work onsite at customer location in Washington DC.
• At least 5 years of hands-on threat intelligence experience using multiple resources and disciplines including network-based data (NetFlow), OSINT, SIEMs, malware repositories, and DFIR.
• Proven ability to create effective intelligence analysis products for government agencies, federal civilian organizations or critical infrastructure sectors.
• Experience integrating unclassified and classified threat intelligence into cohesive deliverables.
• Threat hunting experience within ICS/OT environments or related technology settings.
• Proven experience producing operational and strategic intelligence reporting using confidence-based assessments.
• Proficiency with data aggregation, hunting, and analysis tools (e.g., Synapse).
• Experience building threat models relevant to specific threat and risk profiles.

Responsibilities

• Directly support your customer with their respective ICSoT security and cyber threat intelligence needs.
• Conduct threat research, analysis, and hunting tasks using a variety of proprietary and commercial resources to respond to client inquiries and craft tailored deliverables based on priority intelligence requirements.
• Develop expertise in ICS/OT threats and risks directly relevant to your customer's environment, including attack surface analysis, threat hunting strategies, and threat modeling.
• Support your customer’s cybersecurity initiatives to include threat hunts, incident response, and exercises.
• Partner with internal Threat Intelligence peers to craft operational and strategic content for global Dragos Worldview customers.
• Provide support and feedback to other internal Dragos teams, such as Incident Response, OT-Watch, Professional Services and Customer Experience.

Skills

Threat intelligence

Threat hunting

OSINT

DFIR

Data analysis

Tools

Synapse

NetFlow

SIEMs

Job description

Dragos is seeking a Cyber Threat Intelligence Analyst to support a federal customer. You will partner with the client's Security and Intel teams, researching threats against critical infrastructure and delivering tailored intelligence briefings, reports, and guidance.

Onsite work with the customer is required, with a remote-first, mission-driven culture across North America and beyond. You will analyze ICS/OT threats, perform threat hunting, and craft actionable intelligence products while