Cyber Threat Intelligence Analyst

Booz Allen Hamilton•Washington, DC

2d•$77,600 - $176,000•Remote

About The Position

Join a cybersecurity team supporting one of the world’s most critical hubs for global trade and supply chain operations, where understanding the evolving threat landscape and managing third-party risk are essential to protecting the mission. As a Threat Intelligence and Supply Chain Risk Analyst, you’ll identify, analyze, and communicate cyber threats that could impact critical systems, technologies, and operations. You’ll collect and analyze threat intelligence from commercial, government, open-source, and technical sources to identify relevant threat actors, tactics, techniques, vulnerabilities, campaigns, and emerging risks. You’ll translate that intelligence into actionable insights that help cybersecurity and operational teams understand what threats matter, why they matter, and where defensive attention should be focused. You’ll also support cybersecurity supply chain risk management by assessing risks associated with technology vendors, products, software, services, and other third parties. You’ll research vendor and product risk, analyze vulnerabilities and dependencies, support risk assessments, and identify potential exposure across the technology supply chain. You’ll collaborate with cybersecurity, architecture, engineering, acquisition, and client stakeholders to integrate threat intelligence and supply chain risk considerations into technology decisions and cybersecurity priorities.

Requirements

5+ years of experience with cybersecurity, including experience in cyber threat intelligence, threat analysis, cybersecurity risk, or supply chain risk management
Experience collecting, analyzing, and synthesizing cyber threat intelligence from multiple sources
Experience assessing threat actors, campaigns, tactics, techniques, procedures, vulnerabilities, and indicators of compromise
Experience evaluating cybersecurity risks associated with vendors, technologies, software, or third-party services
Knowledge of MITRE ATT&CK and threat intelligence analysis methodologies
Knowledge of cybersecurity supply chain risk management concepts and practices
Knowledge of NIST cybersecurity and supply chain risk management guidance, including NIST SP 800-161
Secret clearance
HS diploma or GED

Nice To Haves

Experience supporting critical infrastructure, operational technology (OT), or industrial control system (ICS) environments
Experience with threat intelligence platforms, commercial intelligence feeds, or intelligence-sharing communities
Experience conducting vendor or product cybersecurity risk assessments
Experience supporting threat-informed defense or integrating intelligence into security operations and architecture decisions
Knowledge of software supply chain risk, SBOMs, vulnerability intelligence, and third-party technology dependencies
Knowledge of NIST SP 800-53, NIST SP 800-82, and NIST Cybersecurity Framework

Responsibilities

Identify, analyze, and communicate cyber threats that could impact critical systems, technologies, and operations.
Collect and analyze threat intelligence from commercial, government, open-source, and technical sources to identify relevant threat actors, tactics, techniques, vulnerabilities, campaigns, and emerging risks.
Translate intelligence into actionable insights that help cybersecurity and operational teams understand what threats matter, why they matter, and where defensive attention should be focused.
Support cybersecurity supply chain risk management by assessing risks associated with technology vendors, products, software, services, and other third parties.
Research vendor and product risk, analyze vulnerabilities and dependencies, support risk assessments, and identify potential exposure across the technology supply chain.
Collaborate with cybersecurity, architecture, engineering, acquisition, and client stakeholders to integrate threat intelligence and supply chain risk considerations into technology decisions and cybersecurity priorities.