Senior Cyber Threat Intelligence Analyst

ECS Corporate Services; Arlington (VA); Hybrid; USD 145,000 - 160,000; Full time

Job summary

Everforth ECS in Arlington, VA (Hybrid) seeks a Senior Cyber Threat Intelligence Analyst to support federal cybersecurity missions and DHS/CISA programs. The role analyzes classified, government, commercial, and open-source information to identify threats and adversary tactics.

You will produce threat assessments, enrich data, and collaborate with defense, incident response, and government partners. Must have 10+ years of CTI experience and Top Secret/SCI clearance.

Qualifications

• 10+ years of experience in cyber threat intelligence or related fields.
• Experience with intelligence analysis and cybersecurity operations.
• Knowledge of the MITRE ATT&CK framework.
• Experience producing actionable intelligence products for senior audiences.

Responsibilities

• Conduct comprehensive CTI analysis using diverse information sources.
• Research and track cyber threat actors, including state-sponsored adversaries and TTPs.
• Fuse technical and intel reporting to identify emerging threats.
• Analyze, enrich, validate, and correlate threat data.
• Apply MITRE ATT&CK and Diamond Model to characterize behavior.
• Produce threat assessments, intelligence products, threat-hunt referrals, defensive notifications, RFIs, and strategic communications.
• Support vulnerability and threat-response analysis for mission impact.
• Collaborate with cyber defense, incident response, IC, government, and partners.
• Develop and improve intelligence workflows covering data intake, enrichment, attribution, validation, prioritization, escalation, and dissemination.
• Identify opportunities to automate intelligence ingestion, analysis, correlation, and reporting.
• Develop SOPs, analytic methodologies, and training materials.
• Provide technical guidance and mentorship to cybersecurity and intelligence analysts.
• Brief emerging threats, adversary activities, and cyber risks to technical teams and senior stakeholders.

Skills

CTI analysis

Intelligence analysis

Cybersecurity operations

Defensive cyber operations

Network operations

MITRE ATT&CK

Threat reporting

Education

Bachelor's degree or equivalent

Job description

Everforth ECS is seeking a Senior Cyber Threat Intelligence (CTI) Analyst to join our team in Arlington, VA (Hybrid). This position is contingent upon contract award. ECS is seeking talented professionals to join our growing team supporting the Cybersecurity and Infrastructure Security Agency's (CISA) Technical Engineering and Support Services (TESS) program. TESS is CISA's integrated, capability-driven mission ecosystem designed to scale across mission and delivery spaces within the DHS/CISA/Cybersecurity Division/Joint Cyber Defense Collaborative. This is a hybrid role.

We are seeking a Senior Cyber Threat Intelligence Analyst to support federal cybersecurity and national-security missions through advanced cyber threat intelligence, intelligence fusion, adversary analysis, and defensive cyber operations. This position will analyze classified, government, commercial, industry, partner, and open-source information to identify emerging threats, malicious infrastructure, vulnerabilities, indicators of compromise, and adversary tactics, techniques, and procedures. The analyst will translate technical and intelligence reporting into actionable products supporting cyber defenders, mission stakeholders, and senior leadership.

Key Responsibilities

• Conduct comprehensive Cyber Threat Intelligence (CTI) analysis using government, Intelligence Community, commercial, industry, partner, and open-source information.
• Research and track cyber threat actors, including state-sponsored adversaries, associated infrastructure, malware, capabilities, IOCs, and TTPs.
• Fuse technical and intelligence reporting to identify emerging cyber threats and assess their potential operational impact.
• Analyze, enrich, validate, and correlate malicious IP addresses, domains, infrastructure, malware, vulnerabilities, and other threat data.
• Apply analytical frameworks including MITRE ATT&CK and the Diamond Model to characterize adversary behavior and correlate threat activity.
• Produce threat assessments, intelligence products, threat-hunt referrals, defensive notifications, RFIs, and strategic communications.
• Support vulnerability and threat-response analysis to determine potential mission and operational impact.
• Collaborate with cyber defense, incident response, network operations, Intelligence Community, government, and industry partners.
• Develop and improve intelligence workflows covering data intake, enrichment, attribution, validation, prioritization, escalation, and dissemination.
• Identify opportunities to automate intelligence ingestion, analysis, correlation, and reporting.
• Develop SOPs, analytic methodologies, and training materials.
• Provide technical guidance and mentorship to cybersecurity and intelligence analysts.
• Brief emerging threats, adversary activities, and cyber risks to technical teams and senior stakeholders.

Salary Range: $145,000 - $160,000

General Description of Benefits

• Top Secret/SCI Clearance
• Bachelor's degree in Cybersecurity, Intelligence Studies, Information Technology, Computer Science, or a related discipline, or an equivalent combination of military training, certifications, education, and relevant professional experience.
• 10+ years of experience in cyber threat intelligence, intelligence analysis, cybersecurity operations, defensive cyber operations, network operations, or a related discipline.
• Demonstrated experience performing Cyber Threat Intelligence analysis.
• Experience analyzing threat actors, malicious infrastructure, malware, IOCs, vulnerabilities, or adversary TTPs.
• Experience integrating multiple intelligence sources to develop actionable cyber threat assessments.
• Knowledge of the MITRE ATT&CK framework or comparable cyber threat analysis methodologies.
• Experience supporting one or more of the following:
  • Experience developing written intelligence products and presenting findings to operational or senior-level audiences.
  • Experience developing or improving CTI processes, workflows, analytic methodologies, or SOPs.
  • Strong written and verbal communication skills.
  • Demonstrated success collaborating across cybersecurity, intelligence, and mission organizations.