Mid Cyber Threat Intelligence (CTI) Analyst

ecsfederal; Virginia (MN); Hybrid; USD 140,000 - 160,000; Full time

Job summary

Everforth ECS is seeking a Mid Cyber Threat Intelligence (CTI) Analyst to join our team in Arlington, VA (Hybrid). The ideal candidate will collect, analyze, and disseminate actionable threat intelligence to strengthen threat detection, incident response, and security posture across the organization.

The role requires hands-on cyber threat research, familiarity with MITRE ATT&CK, and the ability to translate complex findings for technical and business audiences.

Qualifications

• Minimum 5+ years of cybersecurity experience with at least 2 years in CTI.
• Top Secret Clearance required.
• Bachelor's degree in Cybersecurity, IT, CS, or related field, or equivalent experience.
• Experience with MITRE ATT&CK and Cyber Kill Chain.
• Ability to communicate threats to technical and non-technical audiences.

Responsibilities

• Collect, analyze, and evaluate cyber threat intelligence from open-source, commercial, and government intelligence sources.
• Identify and assess emerging cyber threats, vulnerabilities, malware campaigns, and threat actor activities.
• Develop actionable intelligence reports, threat assessments, and security advisories.
• Track adversary TTPs using MITRE ATT&CK and related frameworks.
• Support SOC and Incident Response teams with threat context and intelligence.

Skills

Threat intelligence analysis

MITRE ATT&CK

SOC collaboration

Threat hunting

Intelligence reporting

Cybersecurity research

Strong communication

Education

Bachelor's degree in Cybersecurity/IT/CS or related field

Job description

Everforth ECS is seeking a Mid Cyber Threat Intelligence (CTI) Analyst to join our team in Arlington, VA (Hybrid).

We are seeking a skilled and analytical Mid Cyber Threat Intelligence (CTI) SME to support the organization's cyber defense program through the collection, analysis, and dissemination of actionable threat intelligence. This role will identify emerging cyber threats, analyze adversary tactics and techniques, and provide intelligence that strengthens threat detection, incident response, and overall security posture.

The ideal candidate combines technical cybersecurity expertise with strong research and analytical skills to translate complex threat information into meaningful insights for both technical and business stakeholders.

Key Responsibilities

Threat Intelligence Analysis

• Collect, analyze, and evaluate cyber threat intelligence from open-source, commercial, and government intelligence sources.
• Identify and assess emerging cyber threats, vulnerabilities, malware campaigns, and threat actor activities.
• Develop actionable intelligence reports, threat assessments, and security advisories.
• Track adversary tactics, techniques, and procedures (TTPs) using frameworks such as MITRE ATT&CK.
• Support infrastructure tracking efforts related to obfuscation-network discovery, fingerprinting, and clustering.

Security Operations Support

• Partner with Security Operations Center (SOC) and Incident Response teams to provide threat context and intelligence support.
• Assist in identifying Indicators of Compromise (IOCs) and Indicators of Attack (IOAs).
• Support threat hunting initiatives through intelligence-driven analysis.
• Contribute to the development of detection rules, use cases, and monitoring strategies.

Threat Monitoring & Research

• Monitor cyber threat trends affecting the organization's industry and technology landscape.
• Research threat actor groups, attack campaigns, and emerging cybersecurity risks.
• Analyze vulnerabilities and assess potential impacts to organizational assets.
• Support intelligence requirements and collection efforts aligned with business priorities.

Reporting & Communication

• Produce clear, concise intelligence reports for technical and non-technical audiences.
• Communicate threat findings and recommendations to cybersecurity teams and management.
• Participate in intelligence briefings and security reviews.
• Contribute to dashboards and intelligence metrics reporting.

Program Support

• Support the maintenance and improvement of cyber threat intelligence processes and methodologies.
• Assist with intelligence sharing initiatives and external partner engagement.
• Maintain intelligence repositories and threat documentation.
• Stay current on industry trends, threat actor activities, and cybersecurity best practices.

Salary Range: $140,000 - $160,000

General Description of Benefits

• Top Secret Clearance
• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Intelligence Studies, or related field, or equivalent experience.
• 5+ years of cybersecurity experience with at least 2 years supporting Cyber Threat Intelligence functions.
• Understanding of the cyber threat intelligence lifecycle and intelligence analysis methodologies.
• Knowledge of common attack techniques, malware types, phishing campaigns, and threat actor behaviors.
• Familiarity with cybersecurity frameworks including MITRE ATT&CK and Cyber Kill Chain.
• Experience supporting SOC, Incident Response, Vulnerability Management, or Threat Hunting functions.
• Strong analytical and critical-thinking skills.
• Excellent written and verbal communication abilities.