Senior CTI Threat Intelligence Lead (Hybrid/Remote)

ecsfederal; Virginia (MN); Hybrid; USD 165,000 - 185,000; Full time

Benefits offered by this job

Hybrid work arrangement

Remote work option

Job summary

Everforth ECS in Arlington, VA (Hybrid) seeks a Cyber Threat Intelligence (CTI) SME Team Lead to guide a specialized threat collection and analytics capability for a National Security client. The role leads a highly technical team, delivering advanced threat intelligence, tracking priority PRC adversaries, and deploying automation-first analytics pipelines.

Salary range is $165,000 - $185,000 with Top Secret clearance eligibility.

Qualifications

• 10+ years of CTI, threat hunting, or threat analysis experience, including leadership of technical teams.
• Active Top Secret clearance with SCI eligibility is required.
• Expertise tracking priority threat actors (including PRC state-sponsored adversaries) and related infrastructure.
• Hands-on experience developing high-confidence signatures, fingerprints, and heuristics.
• Ability mapping adversary behaviors to the MITRE ATT&CK framework and producing hunt/detection guidance.
• Experience correlating diverse external datasets with internal telemetry to drive high-value leads.
• Experience designing automation-first analytics pipelines and integrating AI/ML with human-in-the-loop validation.
• Ability to align intake-to-execution workflows with user operational needs.

Responsibilities

• Lead a technical CTI team delivering advanced threat intelligence and analytics that support PHB and IRB teams.
• Build and manage an intake-to-execution workflow with stakeholders for visibility and delivery.
• Develop and refine automation-first analytics pipelines and behavior fingerprints.
• Track priority actors and map behaviors to MITRE ATT&CK, producing actionable guidance.
• Coordinate with analysts and engineers to ensure timely, validated intelligence outputs.

Skills

CTI leadership

Threat hunting

Team leadership

MITRE ATT&CK

Automation pipelines

Data correlation

Analytical thinking

AI/ML integration

Job description

Everforth ECS in Arlington, VA (Hybrid) seeks a Cyber Threat Intelligence (CTI) SME Team Lead to guide a specialized threat collection and analytics capability for a National Security client. The role leads a highly technical team, delivering advanced threat intelligence, tracking priority PRC adversaries, and deploying automation-first analytics pipelines.

Salary range is $165,000 - $185,000 with Top Secret clearance eligibility.