Cyber Threat Intelligence Analyst - Mid-Level & Senior [U.S. Citizenship, Top Secret Clearance w/SCI Eligibility Required]

Via Logic•Ashburn, VA

22h•Onsite

About The Position

Join Via Logic supporting U.S. Customs and Border Protection cybersecurity operations. As a Cyber Threat Intelligence Analyst, you'll collect, analyze, and disseminate threat information that helps security teams understand emerging threats and protect critical systems and networks. You'll monitor threat intelligence sources, analyze threat data and adversary activity, and produce intelligence reports and products for technical and leadership audiences. Depending on your experience level, you'll also contribute to cyber investigations, threat intelligence sharing, and collaboration with other security teams to turn intelligence into actionable monitoring, detection, and defensive measures. This posting covers both Mid-Level and Senior Cyber Threat Intelligence Analyst openings. We'll consider your experience against the requirements for the available level.

Requirements

U.S. citizenship
Top Secret security clearance with SCI eligibility at the time of assignment
Meet and maintain CBP suitability requirements for access to government facilities and systems
Relevant professional experience in cyber threat intelligence, incident detection and response, or related cybersecurity operations.
Experience collecting, analyzing, researching, or reporting on cyber threat information.
Ability to analyze indicators of compromise, adversary activity, and threat data to identify relevant trends and potential risks.
Experience developing clear threat intelligence reports, assessments, briefings, or other analytical products.
Understanding of how cyber threat intelligence supports security operations, investigations, monitoring, and detection.
Ability to communicate technical findings clearly and collaborate with security analysts, government partners, and other technical teams.
Mid-Level: At least three years of professional experience in incident detection and response and/or cyber threat intelligence analysis, along with a bachelor's degree in Computer Science, Engineering, Information Technology, Cybersecurity, or a related field.
Senior: At least five years of professional experience collecting, synthesizing, fusing, or authoring classified and unclassified cyber threat intelligence products.

Nice To Haves

Experience working in a Security Operations Center or similar cyber defense environment.
Experience working with both classified and unclassified cyber threat intelligence.
Experience collaborating directly with cyber threat hunting, incident response, or Purple Team functions.
Experience translating threat intelligence into detection, monitoring, or other defensive security improvements.

Responsibilities

Collect, analyze, and disseminate cyber threat intelligence supporting security operations and the protection of CBP systems and networks.
Monitor classified and unclassified threat intelligence sources to identify emerging threats, adversary activity, indicators of compromise (IOCs), and relevant tactics, techniques, and procedures (TTPs).
Analyze threat data and conduct research supporting cyber investigations, including analysis of IOCs, threat actor activity, personas, and Advanced Persistent Threat activity.
Produce cyber threat intelligence reports, assessments, briefings, and other products for technical teams, leadership, and other stakeholders.
Identify trends in cyber threats, attacks, targeting, and suspicious or malicious activity and communicate relevant findings.
Support the Security Operations Center in validating IOCs and identifying appropriate monitoring, alerting, blocking, detection, or other defensive measures.
Contribute threat intelligence to incident response, threat hunting, detection, vulnerability assessment, penetration testing, and Purple Team activities as needed.
Share actionable cyber threat intelligence with internal stakeholders and authorized federal partners.
Research threats associated with third-party partners, vendors, and products that may affect CBP information systems or networks.