Mid Cyber Threat Intelligence (CTI) Analyst
About The Position
Everforth ECS is seeking a Mid Cyber Threat Intelligence (CTI) Analyst to join our team in Arlington, VA (Hybrid). This position is contingent upon award. We are seeking a skilled and analytical Mid Cyber Threat Intelligence (CTI) SME to support the organization's cyber defense program through the collection, analysis, and dissemination of actionable threat intelligence. This role will identify emerging cyber threats, analyze adversary tactics and techniques, and provide intelligence that strengthens threat detection, incident response, and overall security posture. The ideal candidate combines technical cybersecurity expertise with strong research and analytical skills to translate complex threat information into meaningful insights for both technical and business stakeholders.
Requirements
- Top Secret Clearance
- Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Intelligence Studies, or related field, or equivalent experience.
- 5+ years of cybersecurity experience with at least 2 years supporting Cyber Threat Intelligence functions.
- Understanding of the cyber threat intelligence lifecycle and intelligence analysis methodologies.
- Knowledge of common attack techniques, malware types, phishing campaigns, and threat actor behaviors.
- Familiarity with cybersecurity frameworks including MITRE ATT&CK and Cyber Kill Chain.
- Experience supporting SOC, Incident Response, Vulnerability Management, or Threat Hunting functions.
- Strong analytical and critical-thinking skills.
- Excellent written and verbal communication abilities.
Responsibilities
- Collect, analyze, and evaluate cyber threat intelligence from open-source, commercial, and government intelligence sources.
- Identify and assess emerging cyber threats, vulnerabilities, malware campaigns, and threat actor activities.
- Develop actionable intelligence reports, threat assessments, and security advisories.
- Track adversary tactics, techniques, and procedures (TTPs) using frameworks such as MITRE ATT&CK.
- Support infrastructure tracking efforts related to obfuscation-network discovery, fingerprinting, and clustering.
- Partner with Security Operations Center (SOC) and Incident Response teams to provide threat context and intelligence support.
- Assist in identifying Indicators of Compromise (IOCs) and Indicators of Attack (IOAs).
- Support threat hunting initiatives through intelligence-driven analysis.
- Contribute to the development of detection rules, use cases, and monitoring strategies.
- Monitor cyber threat trends affecting the organization's industry and technology landscape.
- Research threat actor groups, attack campaigns, and emerging cybersecurity risks.
- Analyze vulnerabilities and assess potential impacts to organizational assets.
- Support intelligence requirements and collection efforts aligned with business priorities.
- Produce clear, concise intelligence reports for technical and non-technical audiences.
- Communicate threat findings and recommendations to cybersecurity teams and management.
- Participate in intelligence briefings and security reviews.
- Contribute to dashboards and intelligence metrics reporting.
- Support the maintenance and improvement of cyber threat intelligence processes and methodologies.
- Assist with intelligence sharing initiatives and external partner engagement.
- Maintain intelligence repositories and threat documentation.
- Stay current on industry trends, threat actor activities, and cybersecurity best practices.
Benefits
- General Description of Benefits [https://ecstech.com/careers/benefits]
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
