Senior Cyber Threat Intelligence (CTI) Analyst

ECS Corporate Services; Arlington (VA); Hybrid; USD 160,000 - 180,000; Full time

Benefits offered by this job

Top Secret Clearance

Job summary

Everforth ECS is seeking a Senior Cyber Threat Intelligence (CTI) Analyst to join our team in Arlington, VA (Hybrid). The role will lead threat intelligence initiatives, collecting, analyzing, and disseminating actionable intelligence on cyber threats, actors, vulnerabilities, and attack trends.

The ideal candidate will collaborate with SOC, Incident Response, Vulnerability Management, and executives to identify and mitigate cyber risks, leveraging frameworks like MITRE ATT&CK and the

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Intelligence Studies, or related field, or equivalent experience.
• 8+ years of cybersecurity experience with at least 5 years focused on Cyber Threat Intelligence.
• Deep understanding of cyber threat actor ecosystems and attack methodologies.
• Experience analyzing malware, ransomware, phishing campaigns, and APTs.
• Strong knowledge of threat intelligence frameworks, lifecycle processes, and threat modeling.

Responsibilities

• Collect, analyze, and disseminate strategic, operational, and tactical cyber threat intelligence across threat actors, IOCs, TTPs.
• Conduct in-depth threat actor analysis, attribution, and link it to business impact.
• Provide actionable intelligence to SOC, IR, and threat hunting teams for improved detection and response.
• Deliver executive-level briefings on threats, risk exposure, and trends to cybersecurity leadership.

Skills

Analytical thinking

Communication skills

Threat intelligence concepts

Education

Bachelor's degree in Cybersecurity/related field

Job description

Everforth ECS is seeking a Senior Cyber Threat Intelligence (CTI) Analyst to join our team in Arlington, VA (Hybrid). This position is contingent upon award.

This position is seeking an experienced Senior Cyber Threat Intelligence (CTI) Subject Matter Expert (SME) to lead threat intelligence initiatives that enhance the organization's cyber defense capabilities. This role is responsible for collecting, analyzing, and disseminating actionable intelligence on cyber threats, threat actors, vulnerabilities, emerging attack trends, and infrastructure tracking / obfuscation-network discovery, fingerprinting, and clustering.

The ideal candidate will leverage multiple intelligence sources, conduct advanced threat analysis, and collaborate closely with Security Operations Center (SOC), Incident Response, Vulnerability Management, and Executive Leadership teams to proactively identify and mitigate cyber risks.

Key Responsibilities

Threat Intelligence Operations

Collect, analyze, and disseminate strategic, operational, and tactical cyber threat intelligence. Monitor the evolving threat landscape, including nation-state actors, cybercriminal organizations, hacktivists, and insider threats. Develop intelligence products, reports, briefings, and alerts tailored to technical and executive audiences. Identify emerging threats, attack campaigns, indicators of compromise (IOCs), and adversary tactics, techniques, and procedures (TTPs).

Cyber Threat Analysis

Conduct in-depth analysis of threat actor groups, motivations, capabilities, and targeting patterns. Utilize frameworks such as MITRE ATT&CK, Cyber Kill Chain, Diamond Model, and Intelligence Lifecycle methodologies. Correlate threat intelligence with internal telemetry, security incidents, and vulnerability data. Perform attribution analysis and assess potential business impact from identified threats. Perform infrastructure tracking in order to effectively conduct obfuscation-network discovery, fingerprinting, and clustering.

Security Operations Support

Provide actionable intelligence to SOC and Incident Response teams to improve detection and response capabilities. Collaborate with security engineers to develop threat detection use cases and intelligence-driven monitoring strategies. Support proactive threat hunting activities by identifying emerging indicators and adversary behaviors. Assist during cyber incidents by delivering real-time intelligence and threat context.

Strategic Advisory

Serve as a trusted advisor to cybersecurity leadership and business stakeholders. Deliver executive-level briefings on cyber threats, risk exposure, and industry-specific threat trends. Assess geopolitical, regulatory, and technology developments that may impact organizational security. Recommend mitigation strategies and security investments based on intelligence findings.

Intelligence Program Development

Enhance and mature cyber threat intelligence capabilities, processes, and tools. Establish intelligence requirements aligned with organizational priorities and risk management objectives. Develop intelligence-sharing relationships with government agencies, industry groups, ISACs, and external partners. Create and maintain threat intelligence playbooks, procedures, and reporting frameworks.

Research & Innovation

Conduct original research on emerging cyber threats, malware families, vulnerabilities, and attack techniques. Evaluate commercial and open-source threat intelligence platforms and services. Stay current on cybersecurity trends, technologies, and intelligence methodologies. Contribute to organizational thought leadership through white papers, presentations, and internal training.

Salary Range

$160,000 - $180,000

General Description of Benefits

• Top Secret Clearance

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Intelligence Studies, or a related field, or equivalent experience.
• 8+ years of cybersecurity experience with at least 5 years focused on Cyber Threat Intelligence.
• Deep understanding of cyber threat actor ecosystems and attack methodologies.
• Experience analyzing malware, ransomware, phishing campaigns, and advanced persistent threats (APTs).
• Strong knowledge of threat intelligence frameworks, intelligence lifecycle processes, and threat modeling techniques.
• Experience supporting Security Operations Centers (SOC), Incident Response, and Threat Hunting functions.
• Strong analytical, investigative, and critical-thinking skills.
• Excellent written and verbal communication skills with the ability to present findings to both technical and executive audiences.