Cyber Threat Intelligence Analyst

QTS Data Centers•Ashburn, VA

1d•$83,753 - $128,080

About The Position

The Cyber Threat Intelligence (CTI) Analyst supports the QTS Threat Intelligence Program by collecting, analyzing, producing, and disseminating actionable intelligence related to cyber threats impacting QTS, its customers, employees, facilities, and critical infrastructure operations. This role serves as a key contributor in identifying emerging threats, adversary tactics, techniques, and procedures (TTPs), and providing intelligence-driven recommendations to reduce organizational risk. The CTI Analyst partners closely with Information Security, Physical Security, Corporate Resilience, Insider Threat, and Technology Operations teams to enhance situational awareness and support proactive risk management. The position helps mature QTS's converged intelligence capabilities through the integration of cyber and physical threat information into a unified intelligence operating model.

Requirements

Bachelor’s degree or equivalent relevant experience
Minimum 2+ years of work experience
Experience collecting, evaluating, and analyzing information from open-source and commercial intelligence sources.
Experience analyzing cyber threats, threat actor behavior, and attack methodologies.
Experience drafting intelligence products for technical and non-technical audiences.
Demonstrated understanding of intelligence lifecycle principles, collection management, and analytic tradecraft.
Strong analytical, written, verbal, and briefing skills.
Ability to manage multiple priorities in a dynamic operational environment.
U.S. Citizenship required due to federal customer support requirements.
Ability to obtain and maintain a U.S. Security Clearance.

Nice To Haves

Certified Threat Intelligence Analyst (CTIA)
GIAC Cyber Threat Intelligence (GCTI)
CISSP
Security+
GIAC Certified Incident Handler (GCIH)
Certified Intelligence Analyst (IALEIA)

Responsibilities

Conduct open-source intelligence (OSINT) collection and analysis across publicly available, commercial, and industry intelligence sources.
Monitor cybercriminal forums, dark web marketplaces, messaging platforms, data leak sites, and threat actor communications for threats relevant to QTS operations.
Identify indications of targeting, reconnaissance, credential exposure, brand abuse, executive threats, and third-party risk activity impacting QTS.
Develop and maintain collection plans aligned with Priority Intelligence Requirements (PIRs) and stakeholder information requirements.
Perform source validation and reliability assessments to ensure intelligence integrity and reduce collection bias.
Correlate cyber, physical, geopolitical, and criminal threat reporting to support a converged intelligence operating model.
Partner with Security Operations and Incident Response teams to provide intelligence support during cyber investigations.
Other duties as assigned.