Senior Cyber Threat Intelligence Analyst

ECS; Arlington (VA); Hybrid; USD 145,000 - 160,000; Full time

Job summary

Everforth ECS in Arlington, VA seeks a Senior Cyber Threat Intelligence Analyst to join the TESS program, offering a hybrid work arrangement.

You will analyze threat data, produce intelligence products, and collaborate with federal partners to support national security missions across cybersecurity and defense domains.

Qualifications

• Bachelor's degree or equivalent combination of military training, certifications, education, and experience.
• Experience in cyber threat intelligence analysis and defense operations.
• Knowledge of MITRE ATT&CK framework or similar methodologies.
• Experience integrating multiple intelligence sources to develop actionable cyber threat assessments.

Responsibilities

• Conduct CTI analysis using government, IC, commercial, and open-source data.
• Research and track threat actors, infrastructure, malware, IOCs, and TTPs.
• Fuse technical and intelligence reporting to identify emerging threats and assess impact.
• Produce threat assessments, intelligence products, and defensive notifications.
• Develop intelligence workflows and SOPs for data intake, enrichment, and dissemination.
• Mentor junior analysts and brief senior stakeholders on emerging threats.

Skills

Top Secret/SCI Clearance

Communication skills

Collaboration across teams

MITRE ATT&CK

Adversary analysis

Education

Bachelor's degree in Cybersecurity/IT/CS or related

Security+ or equivalent certification

CEH or related certification

Tools

DomainTools

RiskIQ

Censys

VirusTotal

Mandiant

CrowdStrike

Analyst1

Palo Alto ILI/Xpanse/CDM

Splunk

Job description

Job Description

Everforth ECS is seeking a Senior Cyber Threat Intelligence (CTI) Analyst to join our team in Arlington, VA (Hybrid).

ECS is seeking talented professionals to join our growing team supporting the Cybersecurity and Infrastructure Security Agency's (CISA) Technical Engineering and Support Services (TESS) program. TESS is CISA's integrated, capability-driven mission ecosystem designed to scale across mission and delivery spaces within the DHS/CISA/Cybersecurity Division/Joint Cyber Defense Collaborative. This is a hybrid role.

We are seeking a Senior Cyber Threat Intelligence Analyst to support federal cybersecurity and national-security missions through advanced cyber threat intelligence, intelligence fusion, adversary analysis, and defensive cyber operations.

This position will analyze classified, government, commercial, industry, partner, and open-source information to identify emerging threats, malicious infrastructure, vulnerabilities, indicators of compromise, and adversary tactics, techniques, and procedures. The analyst will translate technical and intelligence reporting into actionable products supporting cyber defenders, mission stakeholders, and senior leadership.

Key Responsibilities

• Conduct comprehensive Cyber Threat Intelligence (CTI) analysis using government, Intelligence Community, commercial, industry, partner, and open-source information.
• Research and track cyber threat actors, including state-sponsored adversaries, associated infrastructure, malware, capabilities, IOCs, and TTPs.
• Fuse technical and intelligence reporting to identify emerging cyber threats and assess their potential operational impact.
• Analyze, enrich, validate, and correlate malicious IP addresses, domains, infrastructure, malware, vulnerabilities, and other threat data.
• Apply analytical frameworks including MITRE ATT&CK and the Diamond Model to characterize adversary behavior and correlate threat activity.
• Produce threat assessments, intelligence products, threat-hunt referrals, defensive notifications, RFIs, and strategic communications.
• Support vulnerability and threat-response analysis to determine potential mission and operational impact.
• Collaborate with cyber defense, incident response, network operations, Intelligence Community, government, and industry partners.
• Develop and improve intelligence workflows covering data intake, enrichment, attribution, validation, prioritization, escalation, and dissemination.
• Identify opportunities to automate intelligence ingestion, analysis, correlation, and reporting.
• Develop SOPs, analytic methodologies, and training materials.
• Provide technical guidance and mentorship to cybersecurity and intelligence analysts.
• Brief emerging threats, adversary activities, and cyber risks to technical teams and senior stakeholders.

Salary Range: $145,000 - $160,000

Required Skills

• Top Secret/SCI Clearance
• Bachelor's degree in Cybersecurity, Intelligence Studies, Information Technology, Computer Science, or a related discipline, or an equivalent combination of military training, certifications, education, and relevant professional experience.
• 10+ years of experience in cyber threat intelligence, intelligence analysis, cybersecurity operations, defensive cyber operations, network operations, or a related discipline.
• Demonstrated experience performing Cyber Threat Intelligence analysis.
• Experience analyzing threat actors, malicious infrastructure, malware, IOCs, vulnerabilities, or adversary TTPs.
• Experience integrating multiple intelligence sources to develop actionable cyber threat assessments.
• Knowledge of the MITRE ATT&CK framework or comparable cyber threat analysis methodologies.
• Experience supporting one or more of the following:
• Experience developing written intelligence products and presenting findings to operational or senior-level audiences.
• Experience developing or improving CTI processes, workflows, analytic methodologies, or SOPs.
• Strong written and verbal communication skills.
• Demonstrated success collaborating across cybersecurity, intelligence, and mission organizations.

Desired Skills

• CI Polygraph preferred based on customer requirements.
• Experience with CTI and security tools such as DomainTools, RiskIQ, Censys, VirusTotal, Mandiant, CrowdStrike, Analyst1, Palo Alto ILI/Xpanse/CDM, or Splunk.
• Experience working within DoD, DHS, Intelligence Community, or other federal cybersecurity environments.
• Experience supporting DoD Information Network (DODIN) operations.
• Experience conducting cyber fusion analysis utilizing classified and unclassified intelligence sources.
• Experience supporting cyber incident investigations, threat mitigation, or defensive response activities.
• Experience with automation, dashboard development, data visualization, or API integrations.
• Experience developing or operationalizing intelligence-sharing processes.
• Experience providing technical leadership, training, or mentorship to cybersecurity analysts.

Education & Certifications

• Security+ or equivalent cybersecurity certification preferred.
• CEH or other relevant cybersecurity/intelligence certification preferred.

#EverforthECS1

ECS Federal LLC is an equal opportunity employer and does not discriminate or allow discrimination on the basis any characteristic protected by law. All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, or local jurisdiction law.

Everforth ECS is the federal segment of Everforth, a $4B global organization with over 10,000 employees. Our nearly 3,500 professionals deliver advanced technology solutions in data and AI, cybersecurity, and enterprise transformation, serving defense, intelligence, and federal civilian agencies.

Our work powers mission-critical outcomes, strengthens technology partnerships, and creates meaningful opportunities for our people. We are defined by a commitment to excellence in delivery, a culture of innovation, and an environment where talent can thrive and grow.

We Value

• Attracting and developing top talent and high-performing teams
• Fostering a culture that is engaging, accountable, and mission-driven

Meet the challenge. Make a difference with Everforth ECS!