Senior Cyber Threat Intelligence Analyst

ECS Tech Inc•Arlington, VA

2d•$145,000 - $160,000•Hybrid

About The Position

ECS is seeking talented professionals to join our growing team supporting the Cybersecurity and Infrastructure Security Agency's (CISA) Technical Engineering and Support Services (TESS) program. TESS is CISA's integrated, capability-driven mission ecosystem designed to scale across mission and delivery spaces within the DHS/CISA/Cybersecurity Division/Joint Cyber Defense Collaborative. This is a hybrid role. We are seeking a Senior Cyber Threat Intelligence Analyst to support federal cybersecurity and national-security missions through advanced cyber threat intelligence, intelligence fusion, adversary analysis, and defensive cyber operations. This position will analyze classified, government, commercial, industry, partner, and open-source information to identify emerging threats, malicious infrastructure, vulnerabilities, indicators of compromise, and adversary tactics, techniques, and procedures. The analyst will translate technical and intelligence reporting into actionable products supporting cyber defenders, mission stakeholders, and senior leadership.

Requirements

Top Secret/SCI Clearance
Bachelor's degree in Cybersecurity, Intelligence Studies, Information Technology, Computer Science, or a related discipline, or an equivalent combination of military training, certifications, education, and relevant professional experience.
10+ years of experience in cyber threat intelligence, intelligence analysis, cybersecurity operations, defensive cyber operations, network operations, or a related discipline.
Demonstrated experience performing Cyber Threat Intelligence analysis.
Experience analyzing threat actors, malicious infrastructure, malware, IOCs, vulnerabilities, or adversary TTPs.
Experience integrating multiple intelligence sources to develop actionable cyber threat assessments.
Knowledge of the MITRE ATT&CK framework or comparable cyber threat analysis methodologies.
Experience supporting one or more of the following:
Experience developing written intelligence products and presenting findings to operational or senior-level audiences.
Experience developing or improving CTI processes, workflows, analytic methodologies, or SOPs.
Strong written and verbal communication skills.
Demonstrated success collaborating across cybersecurity, intelligence, and mission organizations.

Responsibilities

Conduct comprehensive Cyber Threat Intelligence (CTI) analysis using government, Intelligence Community, commercial, industry, partner, and open-source information.
Research and track cyber threat actors, including state-sponsored adversaries, associated infrastructure, malware, capabilities, IOCs, and TTPs.
Fuse technical and intelligence reporting to identify emerging cyber threats and assess their potential operational impact.
Analyze, enrich, validate, and correlate malicious IP addresses, domains, infrastructure, malware, vulnerabilities, and other threat data.
Apply analytical frameworks including MITRE ATT&CK and the Diamond Model to characterize adversary behavior and correlate threat activity.
Produce threat assessments, intelligence products, threat-hunt referrals, defensive notifications, RFIs, and strategic communications.
Support vulnerability and threat-response analysis to determine potential mission and operational impact.
Collaborate with cyber defense, incident response, network operations, Intelligence Community, government, and industry partners.
Develop and improve intelligence workflows covering data intake, enrichment, attribution, validation, prioritization, escalation, and dissemination.
Identify opportunities to automate intelligence ingestion, analysis, correlation, and reporting.
Develop SOPs, analytic methodologies, and training materials.
Provide technical guidance and mentorship to cybersecurity and intelligence analysts.
Brief emerging threats, adversary activities, and cyber risks to technical teams and senior stakeholders.