Cyber Threat Intelligence Analyst

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Cyber Threat Intelligence Analyst - Mid-Level & Senior (Top Secret Clearance w/SCI Eligibility Required) based in United States.

• Collect, analyze, and disseminate cyber threat intelligence supporting security operations and the protection of critical government systems and networks.
• Monitor classified and unclassified intelligence sources to identify emerging threats, adversary activity, indicators of compromise, and relevant tactics, techniques, and procedures.
• Research and analyze threat actors, personas, campaigns, Advanced Persistent Threat activity, and other cyber activity to identify trends and potential risks.
• Produce clear and actionable cyber threat intelligence reports, assessments, briefings, and other analytical products for technical teams, leadership, and stakeholders.
• Support Security Operations Center activities by validating indicators of compromise and recommending appropriate monitoring, alerting, blocking, detection, and defensive measures.
• Contribute intelligence to incident response, threat hunting, detection engineering, vulnerability assessments, penetration testing, and Purple Team activities as needed.
• Share actionable intelligence with internal stakeholders and authorized federal partners.
• Research cybersecurity risks associated with third-party partners, vendors, and products that may affect information systems or networks.
• Collaborate with security analysts, government partners, and other technical teams to translate intelligence findings into practical security improvements.

• U.S. citizenship is required.
• Active Top Secret security clearance with SCI eligibility is required at the time of assignment, along with the ability to meet and maintain applicable federal suitability requirements.
• Mid-Level candidates should have 3+ years of professional experience in cyber threat intelligence analysis, incident detection and response, or a related cybersecurity discipline.
• Senior candidates should have 5+ years of professional experience collecting, synthesizing, fusing, or authoring classified and unclassified cyber threat intelligence products.
• Mid-Level candidates should have a bachelor’s degree in Computer Science, Engineering, Information Technology, Cybersecurity, or a related field.
• Demonstrated ability to collect, analyze, research, and report on cyber threat information, including indicators of compromise, adversary activity, and threat data.
• Experience developing clear intelligence reports, assessments, briefings, or similar analytical products.
• Understanding of how cyber threat intelligence supports security operations, investigations, monitoring, detection, and defensive security.
• Strong communication skills and the ability to explain technical findings clearly to technical and leadership audiences.
• Experience working in a Security Operations Center or similar cyber defense environment is preferred.
• Experience working with both classified and unclassified cyber threat intelligence is preferred.
• Experience collaborating with threat hunting, incident response, or Purple Team functions is a plus.
• Experience translating intelligence into monitoring, detection, or other defensive security improvements is preferred.
• Ability to work primarily onsite at a government site in Ashburn, VA, with limited on-call requirements based on assignment needs.

• Mid-Level salary range of $110,000–$139,000 annually, depending on experience, qualifications, and assignment.
• Senior salary range of $118,000–$152,000 annually, depending on experience, qualifications, and assignment.
• Full-time, W-2 employment.
• Healthcare coverage.
• Paid time off.
• Opportunities to deepen cybersecurity expertise and explore adjacent areas as new assignments become available.
• Collaborative teammates who share knowledge and support professional growth.
• Meaningful work supporting a federal mission and helping protect critical systems and networks.
• Primarily onsite work in Ashburn, VA.
• Core task coverage generally scheduled weekdays from 8:30 a.m. to 5:00 p.m. Eastern Time, with assignment-specific on-call requirements discussed during the hiring process.