OSINT Cyber Threat Intelligence Analyst - On-Site VA

Peraton; Arlington (VA); On-site; USD 104,000 - 166,000; Full time

Job summary

Peraton is seeking an Open-Source Cyber Threat Intelligence Analyst for the Federal Strategic Cyber Programs. Location: Northern VA, on-site, full-time. Travel up to two weeks at a time is required.

You will gather Open-Source intelligence across surface/deep/dark web, social media, forums, and global sources to track APT actors and provide high-value analyses for Department of State security.

Qualifications

• Bachelor's degree with 9+ years of experience; or 7 years with a Masters; 4 years with PhD.
• Must have one of the listed certifications (e.g., CISSP, CEH, CCNP Security, CISA, GIAC).
• Experience with OSINT, APT tracking, and threat intelligence methodologies.
• Familiarity with ICD-203 tradecraft standards is desirable.

Responsibilities

• Serve as the primary OSINT collector and analyst for the I&W mission across surface/deep/dark web, social media, threat forums, and global sources.
• Track APT actors, their infrastructure, exploitation methods, and TTPs using OSINT and feeds.
• Conduct pattern, trend, link, and behavior analysis to identify malicious activity affecting DoS personnel and systems.
• Maintain structured analytic records and metadata for campaigns, infrastructure changes, and IOCs.
• Identify and triage IOCs using SIEM tools; pivot to external leads to find more infrastructure.
• Integrate OSINT with technical telemetry to enhance situational awareness and recommendations.

Skills

OSINT collection

APT analysis

Threat actor tracking

SIEM experience

Threat modeling frameworks

Analytical thinking

Technical writing

Communication

Education

Bachelor's degree

Tools

SIEMs

MITRE ATT&CK

Lockheed Martin Kill Chain

Diamond Model

Job description

Peraton is seeking an Open-Source Cyber Threat Intelligence Analyst for the Federal Strategic Cyber Programs. Location: Northern VA, on-site, full-time. Travel up to two weeks at a time is required.

You will gather Open-Source intelligence across surface/deep/dark web, social media, forums, and global sources to track APT actors and provide high-value analyses for Department of State security.