Senior Threat Inteligence Analyst

Revolutional; Washington (District of Columbia, MD); On-site; USD 150,000 - 190,000; Full time

Job summary

Revolutional is seeking a Senior Threat Intel Analyst to lead CTI collection and processing in a 24x7x365 SOC supporting a large federal agency. The role requires Top Secret clearance and hands-on mentoring of analysts, with responsibility for actionable monitoring and adversary profiling.

The successful candidate will oversee threat intelligence from multiple sources, translate it into countermeasures, and stay current on threat actors, TTPs, and MITRE ATT&CK.

Qualifications

• Bachelor’s degree required with 12+ years of relevant professional experience; three additional years may substitute for a degree.
• Recognised expert in cyber threat intelligence with ability to contribute to the field.
• Proven ability to resolve highly complex, multi-dimensional problems with deep technical knowledge.

Responsibilities

• Serve as task lead for CTI collection and processing, assigning and reviewing analysts’ work.
• Compile emerging threats from multiple sources and transform into actionable monitoring.
• Review threat reports, feeds and vulnerability alerts for client relevance.
• Maintain awareness of active threat actors and indicators of compromise.
• Process classified CTI up to Top Secret level.
• Identify threats based on client tech and evolving tools/methodologies.
• Develop mitigations and countermeasures; participate in investigations as needed.
• Produce adversary threat set profiles and intelligence products.

Skills

Threat intelligence leadership

Mentor junior analysts

CTI platforms

MITRE ATT&CK

TS/SCI eligibility

Federal contracting experience

Cybersecurity certifications (GCTI, GC

Education

Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related field

Tools

Threat intelligence platforms

Job description

Location: Onsite – New Carrollton, MD or Memphis, TN

Terms: Full-time

Clearance: Top-Secret

Travel: 0% (onsite presence at client facilities as directed)

Position Description

We are seeking a Senior Threat Intel Analyst to serve as task lead for cyber threat intelligence (CTI) collection and processing in a 24x7x365 Security Operations Center (SOC) supporting a large federal agency. This individual contributor and recognized thought leader provides technical expertise in adversary cyber capabilities, assesses the intentions of adversary groups to attack and exploit U.S. private sector and government networks, and determines the applicability of threat reporting to the client’s applications and infrastructure. The role develops cutting-edge solutions with other experts and mentors junior staff.

The successful candidate will:

• Lead collection and processing of threat intelligence from all sources.
• Turn intelligence into actionable monitoring and countermeasures.
• Maintain awareness of active threat actors and their indicators.
• Mentor and coach analysts on adversary tactics.

Responsibilities:

• Serve as task lead for CTI collection and processing, assigning and reviewing the work of intelligence analysts.
• Compile information on emerging threats at different classification levels from Internet security firms, government organizations, private industry, foreign governments, and internal sources, and transform it into actionable monitoring through custom content.
• Review cybersecurity news feeds, signature updates, incident reports, threat briefs, and vulnerability alerts from the intelligence community, law enforcement, and other external sources, and determine applicability to the client environment.
• Maintain awareness of active cyber threat actors and associated threat sets, including indicators of compromise.
• Process and integrate classified CTI up to the Top Secret level.
• Identify potential threats based on the client’s hardware and software, and current and evolving hacking tools and methodologies.
• Determine risks to the enterprise and develop mitigations and countermeasures.
• Participate in active investigations as requested, including during non-regular duty hours within one hour of notification.
• Produce adversary threat set profiles and intelligence products.

Required Skills and Experience

• Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related field and 12+ years of relevant professional experience; three (3) years of additional relevant experience may be substituted in lieu of a degree.
• Widely recognized thought leader in cyber threat intelligence who contributes to the body of knowledge in the field.
• Ability to resolve undefined, highly complex, and multi-dimensional problems requiring significant technical depth, conceptualization, and interpretation.
• Expert knowledge and mastery of advanced technologies, adversary tactics, techniques, and procedures (TTPs), and threat actor tracking.
• Experience processing classified intelligence and working with intelligence community or law enforcement partners.
• Experience mentoring and coaching junior technical staff.
• Experience leading a team or serving as a task lead, including assigning work, reviewing quality, and reporting status to client leadership.
• Experience supporting federal government contracts as a contractor, including working to contract performance standards, deliverable schedules, and government review and approval processes.
• Certifications such as GCTI, GCIH, or CTIA.
• Experience with threat intelligence platforms and MITRE ATT&CK.
• TS/SCI eligibility.

Work Authorization/Clearance: U.S. Citizenship is required with an active Top Secret clearance.