Remote CTI Team Lead: Threat Intelligence & Analytics

ECS Corporate Services; Arlington (VA); Hybrid; USD 165,000 - 185,000; Full time

Job summary

Everforth ECS in Arlington, VA (Hybrid) seeks a Cyber Threat Intelligence Team Lead to guide a specialized CTI collection and analytics capability for a National Security program. You will lead threat analysts and engineers to deliver advanced intelligence, track priority actors, and drive automation-first analytics pipelines.

The role demands strong technical authority, proven leadership, and the ability to map actor behaviors to MITRE ATT&CK, integrate diverse datasets, and provide clear hunt

Qualifications

• 10+ years of CTI/threat analysis experience, including leading technical teams.
• Active Top Secret Clearance with SCI eligibility.
• Experience tracking priority threat actors (including PRC state-sponsored) and related infrastructure.
• Hands-on development of high-confidence signatures, fingerprints, and heuristics.
• Proficiency mapping adversary behaviors to MITRE ATT&CK and producing hunt/detection guidance.
• Ability to correlate diverse datasets with internal telemetry to drive hunt leads.
• Experience designing automation-first analytics pipelines, including AI/ML model integration.
• Experience establishing intake-to-execution workflows aligned with user needs.

Responsibilities

• Lead a highly technical CTI team delivering advanced threat intelligence.
• Oversee collection and analytics capability within Threat Branch for national security client.
• Develop and implement automation-first analytics pipelines and validation workflows.
• Map actor behaviors to MITRE ATT&CK and provide actionable hunt/detection guidance.
• Maintain visibility into intelligence requests, outputs, and service delivery for stakeholders.

Skills

Leadership

Threat intelligence

Team leadership

MITRE ATT&CK mapping

Automation pipelines

AI/ML integration

Threat actor tracking

Stakeholder communication

Tools

MITRE ATT&CK framework

AI/ML models

Job description

Everforth ECS in Arlington, VA (Hybrid) seeks a Cyber Threat Intelligence Team Lead to guide a specialized CTI collection and analytics capability for a National Security program. You will lead threat analysts and engineers to deliver advanced intelligence, track priority actors, and drive automation-first analytics pipelines.

The role demands strong technical authority, proven leadership, and the ability to map actor behaviors to MITRE ATT&CK, integrate diverse datasets, and provide clear hunt