Mid Cyber Threat Intelligence (CTI) Analyst

Socket.dev; Arlington (VA); Hybrid; USD 140,000 - 160,000; Full time

Benefits offered by this job

Hybrid work arrangement

Job summary

Everforth ECS in Arlington, VA (Hybrid) is seeking a Mid Cyber Threat Intelligence (CTI) Analyst to join our team. The role focuses on collection, analysis, and dissemination of actionable threat intelligence to strengthen threat detection and incident response.

The successful candidate will have Top Secret clearance, 5+ years in cybersecurity, and experience with MITRE ATT&CK. Responsibilities include producing intelligence reports, supporting SOC, and briefing management.

Qualifications

• Top Secret Clearance required.
• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Intelligence Studies, or related field, or equivalent experience.
• 5+ years of cybersecurity experience with at least 2 years supporting Cyber Threat Intelligence functions.
• Knowledge of MITRE ATT&CK and Cyber Kill Chain.

Responsibilities

• Collect, analyze, and evaluate cyber threat intelligence from open-source, commercial, and government intelligence sources.
• Identify and assess emerging cyber threats, malware campaigns, and threat actor activities.
• Develop actionable intelligence reports, threat assessments, and security advisories.
• Track adversary TTPs using MITRE ATT&CK and related frameworks.
• Support SOC and incident response with threat context and intelligence findings.

Skills

Threat intelligence

Analytical thinking

Communication skills

Clear reporting

Education

Bachelor's degree

Job description

Everforth ECS is seeking a Mid Cyber Threat Intelligence (CTI) Analyst to join our team in Arlington, VA (Hybrid). This position is contingent upon award.

We are seeking a skilled and analytical Mid Cyber Threat Intelligence (CTI) SME to support the organization's cyber defense program through the collection, analysis, and dissemination of actionable threat intelligence. This role will identify emerging cyber threats, analyze adversary tactics and techniques, and provide intelligence that strengthens threat detection, incident response, and overall security posture.

The ideal candidate combines technical cybersecurity expertise with strong research and analytical skills to translate complex threat information into meaningful insights for both technical and business stakeholders.

Key Responsibilities

Threat Intelligence Analysis

• Collect, analyze, and evaluate cyber threat intelligence from open-source, commercial, and government intelligence sources.
• Identify and assess emerging cyber threats, vulnerabilities, malware campaigns, and threat actor activities.
• Develop actionable intelligence reports, threat assessments, and security advisories.
• Track adversary tactics, techniques, and procedures (TTPs) using frameworks such as MITRE ATT&CK.
• Support infrastructure tracking efforts related to obfuscation-network discovery, fingerprinting, and clustering.

Security Operations Support

• Partner with Security Operations Center (SOC) and Incident Response teams to provide threat context and intelligence support.
• Assist in identifying Indicators of Compromise (IOCs) and Indicators of Attack (IOAs).
• Support threat hunting initiatives through intelligence-driven analysis.
• Contribute to the development of detection rules, use cases, and monitoring strategies.

Threat Monitoring & Research

• Monitor cyber threat trends affecting the organization's industry and technology landscape.
• Research threat actor groups, attack campaigns, and emerging cybersecurity risks.
• Analyze vulnerabilities and assess potential impacts to organizational assets.
• Support intelligence requirements and collection efforts aligned with business priorities.

Reporting & Communication

• Produce clear, concise intelligence reports for technical and non-technical audiences.
• Communicate threat findings and recommendations to cybersecurity teams and management.
• Participate in intelligence briefings and security reviews.
• Contribute to dashboards and intelligence metrics reporting.

Program Support

• Support the maintenance and improvement of cyber threat intelligence processes and methodologies.
• Assist with intelligence sharing initiatives and external partner engagement.
• Maintain intelligence repositories and threat documentation.
• Stay current on industry trends, threat actor activities, and cybersecurity best practices.

Salary Range: $140,000 - $160,000

General Description of Benefits

Qualifications

• Top Secret Clearance
• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Intelligence Studies, or related field, or equivalent experience.
• 5+ years of cybersecurity experience with at least 2 years supporting Cyber Threat Intelligence functions.
• Understanding of the cyber threat intelligence lifecycle and intelligence analysis methodologies.
• Knowledge of common attack techniques, malware types, phishing campaigns, and threat actor behaviors.
• Familiarity with cybersecurity frameworks including MITRE ATT&CK and Cyber Kill Chain.
• Experience supporting SOC, Incident Response, Vulnerability Management, or Threat Hunting functions.
• Strong analytical and critical-thinking skills.
• Excellent written and verbal communication abilities.