Cyber Threat Intelligence Analyst

MANTECH • Doral, FL

19h • Onsite

About The Position

MANTECH is seeking a motivated, career- and customer-oriented Cyber Threat Intelligence Analyst to join its team in Doral, Florida. The position supports national defense by analyzing cyber threats and helping protect networks through intelligence-driven defense and operational improvements.

The analyst collects and synthesizes intelligence from all-source repositories and technical sensors; assesses adversary tactics, techniques, and procedures using the MITRE ATT&CK framework; and produces threat assessments, briefings, and actionable indicators. The role works with technical teams, incident responders, and cybersecurity leaders to mitigate threats, monitors network telemetry and security events for adversary activity, and maintains intelligence baselines, repositories, and dissemination logs. The analyst also recommends and implements improvements to threat detection and intelligence workflows.

Applicants must hold a current, active TS/SCI clearance. The role is onsite in Doral, Florida. Physical requirements include remaining stationary for 50% of the time, occasionally moving around the office to access equipment or files, and frequently communicating with coworkers, management, and customers, including delivering presentations.

Requirements

• Bachelor’s degree in Cybersecurity, Intelligence Studies, Computer Science, or a related field and at least 5 years of experience in cyber threat intelligence or cyber defense analytics; alternatively, a master’s degree and at least 3 years, an associate’s degree and at least 7 years, or a high school diploma and at least 9 years of relevant experience.
• Proven experience conducting technical cyber threat analysis, adversary TTP mapping, and threat intelligence reporting.
• Strong background using Threat Intelligence Platforms (TIP), open-source intelligence (OSINT), and technical indicators of compromise (IOCs).
• Experience maintaining intelligence baselines, documentation controls, and threat tracking repositories.
• Experience creating, maintaining, and communicating complex technical documentation and executive intelligence briefings.
• Must hold a current, active TS/SCI security clearance.
• Must be able to remain stationary for 50% of the time.
• Must occasionally move about inside the office to access file cabinets, office machinery, and similar items.
• Must frequently communicate with coworkers, management, and customers, including delivering presentations, and exchange accurate information.

Nice To Haves

• Relevant professional certification such as GIAC Cyber Threat Intelligence (GCTI), Certified Threat Intelligence Analyst (CTIA), or CompTIA CySA+.
• Prior experience supporting U.S. Military Command operations, Combatant Command intelligence centers, or Department of Defense cyber operations.
• Familiarity with diamond model analysis, malware analysis fundamentals, and automated threat feeds.
• Ability to collaborate effectively across multidisciplinary engineering teams in fast-paced operational environments.

Responsibilities

• Collect, analyze, and synthesize cyber threat intelligence from all-source intelligence repositories and technical sensors.
• Evaluate threat actor tactics, techniques, and procedures using the MITRE ATT&CK framework to assess potential operational impacts.
• Develop threat assessments, intelligence briefings, and actionable cyber threat indicators to support proactive network defense.
• Collaborate with technical teams, incident responders, and cybersecurity leadership to mitigate identified cyber threats.
• Monitor enterprise network telemetry and security event feeds to track adversary activity and emerging threat vectors.
• Maintain threat intelligence baselines, intelligence repositories, and operational dissemination logs.
• Recommend and implement process improvements to enhance threat detection capabilities and intelligence workflows.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level