Mid Cyber Threat Intelligence (CTI) Analyst

ECS; Arlington (VA); Hybrid; USD 140,000 - 160,000; Full time

Job summary

Everforth ECS in Arlington, VA is seeking a Mid Cyber Threat Intelligence (CTI) Analyst to join our hybrid team. This role focuses on collecting and analyzing cyber threat intelligence from open-source, commercial, and government sources to support security operations and incident response.

You will track adversary TTPs, produce intelligence reports, and contribute to detection rules and dashboards, helping the organization stay ahead of threats while collaborating with SOC, IR, and enterprise

Qualifications

• 5+ years of cybersecurity experience with at least 2 years in Cyber Threat Intelligence.
• Active Top Secret clearance required.
• Bachelor's degree or equivalent experience.
• Understanding of the threat intelligence lifecycle and analysis methodologies.
• Familiarity with MITRE ATT&CK and Cyber Kill Chain.
• Experience supporting SOC, Incident Response, Vulnerability Management, or Threat Hunting.
• Strong analytical and communication skills.

Responsibilities

• Collect and evaluate cyber threat intelligence from OSINT, commercial, and government sources.
• Identify threats, vulnerabilities, malware campaigns, and actor activities.
• Develop actionable intelligence reports, threat assessments, and advisories.
• Track TTPs using MITRE ATT&CK; monitor obfuscation-network activities.
• Support SOC/IR with threat context and indicators.
• Assist in detection rule development and monitoring strategies.
• Research threat actors and campaigns; assess risks to assets.
• Produce clear threat findings for technical and leadership audiences.
• Contribute to dashboards and intelligence metrics.

Skills

Top Secret Clearance

Cybersecurity experience

MITRE ATT&CK

Threat hunting

SOC/IR support

Analytical thinking

Communication skills

Education

Bachelor's degree in Cybersecurity, IT, CS, Intelligence Studies or related field

Tools

SIEM

EDR/XDR

Threat Intelligence Platform (TIP)

STIX/TAXII

YARA

Sigma

Job description

Job Description

Everforth ECS is seeking a Mid Cyber Threat Intelligence (CTI) Analyst to join our team in Arlington, VA (Hybrid). This position is contingent upon award.

Key Responsibilities

Threat Intelligence Analysis

• Collect, analyze, and evaluate cyber threat intelligence from open-source, commercial, and government intelligence sources.
• Identify and assess emerging cyber threats, vulnerabilities, malware campaigns, and threat actor activities.
• Develop actionable intelligence reports, threat assessments, and security advisories.
• Track adversary tactics, techniques, and procedures (TTPs) using frameworks such as MITRE ATT&CK.
• Support infrastructure tracking efforts related to obfuscation-network discovery, fingerprinting, and clustering.

Security Operations Support

• Partner with Security Operations Center (SOC) and Incident Response teams to provide threat context and intelligence support.
• Assist in identifying Indicators of Compromise (IOCs) and Indicators of Attack (IOAs).
• Support threat hunting initiatives through intelligence-driven analysis.
• Contribute to the development of detection rules, use cases, and monitoring strategies.

Threat Monitoring & Research

• Monitor cyber threat trends affecting the organization's industry and technology landscape.
• Research threat actor groups, attack campaigns, and emerging cybersecurity risks.
• Analyze vulnerabilities and assess potential impacts to organizational assets.
• Support intelligence requirements and collection efforts aligned with business priorities.

Reporting & Communication

• Produce clear, concise intelligence reports for technical and non-technical audiences.
• Communicate threat findings and recommendations to cybersecurity teams and management.
• Participate in intelligence briefings and security reviews.
• Contribute to dashboards and intelligence metrics reporting.

Program Support

• Support the maintenance and improvement of cyber threat intelligence processes and methodologies.
• Assist with intelligence sharing initiatives and external partner engagement.
• Maintain intelligence repositories and threat documentation.
• Stay current on industry trends, threat actor activities, and cybersecurity best practices.

Salary Range: $140,000 - $160,000

Required Skills

• Top Secret Clearance
• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Intelligence Studies, or related field, or equivalent experience.
• 5+ years of cybersecurity experience with at least 2 years supporting Cyber Threat Intelligence functions.
• Understanding of the cyber threat intelligence lifecycle and intelligence analysis methodologies.
• Knowledge of common attack techniques, malware types, phishing campaigns, and threat actor behaviors.
• Familiarity with cybersecurity frameworks including MITRE ATT&CK and Cyber Kill Chain.
• Experience supporting SOC, Incident Response, Vulnerability Management, or Threat Hunting functions.
• Strong analytical and critical-thinking skills.
• Excellent written and verbal communication abilities.

Desired Skills

• Experience with SIEM, EDR/XDR, and Threat Intelligence Platform (TIP) technologies.
• Knowledge of cloud security environments such as Azure, AWS, or Google Cloud.
• Familiarity with infrastructure tracking / obfuscation-network discovery, fingerprinting, and clustering.
• Familiarity with OSINT, STIX/TAXII, MISP, YARA, and Sigma.
• Experience developing intelligence reports for operational and leadership stakeholders.
• Military, intelligence community, government, or critical infrastructure experience.

ECS Federal LLC is an equal opportunity employer and does not discriminate or allow discrimination on the basis any characteristic protected by law. All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, or local jurisdiction law.

Everforth ECS is the federal segment of Everforth, a $4B global organization with over 10,000 employees. Our nearly 3,500 professionals deliver advanced technology solutions in data and AI, cybersecurity, and enterprise transformation, serving defense, intelligence, and federal civilian agencies. Our work powers mission-critical outcomes, strengthens technology partnerships, and creates meaningful opportunities for our people. We are defined by a commitment to excellence in delivery, a culture of innovation, and an environment where talent can thrive and grow.

We Value

• Attracting and developing top talent and high-performing teams
• Fostering a culture that is engaging, accountable, and mission-driven

Meet the challenge. Make a difference with Everforth ECS!