Cyber Threat Intelligence Lead
About The Position
This position is contingent upon contract award SOSi is seeking highly qualified senior professionals to support a DHS enterprise cybersecurity program providing 24/7 Security Operations Center (SOC) services. These roles deliver leadership, operational oversight, and technical expertise across cyber defense, incident response, intelligence, engineering, and modernization activities. Job Description Directs cyber threat intelligence collection, analysis, production, and integration into SOC workflows; maintains situational awareness of threat actors, TTPs, and campaigns to inform detection content, hunt priorities, and leadership decisions.
Requirements
- 7+ years as a Tier III cyber analyst and 5+ years hands-on, including the last 2 years performing host- and network-based monitoring.
- Forensics, intrusion detection, incident response, malware analysis, and security content development (signatures/rules).
- Ability to develop/interpret scripts in VB, Python, C++, and HTML/XML.
- TS, SCI-eligible.
Nice To Haves
- CISSP or CTI-related certifications preferred.
Responsibilities
- Develop actionable intelligence products, IOCs, and early-warning assessments supporting operations.
- Integrate CTI with detection engineering and hunt teams; drive signature/rule/content development.
- Maintain threat actor tracking, trends/metrics, and leadership reporting.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
Education Level
No Education Listed
