Senior Cyber Threat Intelligence Analyst

Peraton•Washington, DC

1d•$112,000 - $179,000

About The Position

The Senior Cyber Threat Intelligence Analyst provides advanced cyber threat intelligence (CTI) analysis, production, tradecraft development, and stakeholder engagement in support of a classified government mission. The analyst is responsible for developing actionable intelligence products, translating complex technical and operational information into decision-ready assessments, and establishing repeatable processes that improve the quality, timeliness, accessibility, and dissemination of intelligence. The position requires demonstrated expertise in cyber threat analysis, intelligence production, analytic tradecraft, product lifecycle management, and collaboration with government, industry, and mission partners. The successful candidate will operate effectively in classified environments and contribute to initiatives that strengthen collective cyber defense across government and critical-infrastructure stakeholders.

Requirements

Bachelor's degree in Cybersecurity, Intelligence Studies, Computer Science, Information Technology, Engineering, or a related field; equivalent professional experience may be considered.
12+ years of relevant experience in cyber threat intelligence, cybersecurity analysis, intelligence operations, cyber defense, or a related discipline; Minimum of 10 years with MS/MA; Minimum of 7 years with Ph.D.
Active TS or Q clearance or higher is required. Ability to obtain Q/SCI.
Demonstrated experience producing intelligence assessments, threat reports, hunt guides, analytic products, or other operationally focused CTI products.
Demonstrated understanding of cyber threat intelligence lifecycle principles, including collection, processing, analysis, production, dissemination, and feedback.
Strong knowledge of adversary TTPs, cyber kill chain concepts, MITRE ATT&CK, network security, vulnerability exploitation, malware, intrusion activity, and defensive cyber operations.
Experience analyzing threats to operational technology (OT), industrial control systems (ICS), critical infrastructure, or other specialized environments.
Demonstrated experience developing SOPs, analytic standards, production methodologies, or other process-improvement frameworks.
Experience managing intelligence-product pipelines, production schedules, task tracking, or workflow-management processes.
Experience developing intelligence dissemination strategies and tailoring products to different intelligence consumers.
Excellent written and verbal communication skills, including the ability to communicate complex technical and intelligence concepts to senior government and mission stakeholders.
Ability to work independently, prioritize competing requirements, and operate effectively in a fast-paced mission environment.
Ability to collaborate across technical, intelligence, operational, government, and industry organizations.
Experience working with classified information and operating within security and information-handling requirements appropriate to the mission.

Nice To Haves

Master's degree in Cybersecurity, Intelligence Studies, Computer Science, Information Assurance, or a related field.
Experience supporting U.S. Government cyber, intelligence, national security, or critical-infrastructure missions.
Experience producing intelligence for government-industry information-sharing organizations or fusion centers.
Experience with cyber intelligence platforms, SIEM/EDR data, network telemetry, malware analysis, vulnerability intelligence, or threat-hunting workflows.
Experience with ICS/OT technologies and vendors, including Cisco, Schneider Electric, and Schweitzer Engineering Laboratories (SEL).
Familiarity with intelligence community analytic standards and structured analytic techniques.
Experience developing or evaluating analytic tradecraft rubrics and quality-assurance programs.
Experience creating dashboards, production trackers, workflow-management tools, or automated reporting mechanisms.
Relevant professional certifications such as CISSP, GIAC, GCTI, GCIA, GCIH, Security+, CEH, or equivalent.
Familiarity with intelligence classification, downgrading, sanitization, declassification, and dissemination processes.
Active security clearance appropriate to the contract, with the ability to maintain that clearance.

Responsibilities

Conduct advanced cyber threat intelligence analysis using classified and open-source reporting, technical data, threat reporting, incident information, and other intelligence sources to identify adversary tactics, techniques, procedures (TTPs), vulnerabilities, and emerging threats.
Develop, edit, validate, publish, and appropriately classify or downgrade intelligence products in accordance with established classification guidance, dissemination requirements, and mission objectives.
Author and maintain technical Hunt Guides and other operational intelligence products addressing enterprise and industrial-control-system technologies, including network infrastructure, security appliances, operational technology (OT), and industrial control systems (ICS).
Support the development and dissemination of intelligence products involving technologies such as Cisco security and network operating systems, Schneider Electric systems, SEL systems, and other critical-infrastructure technologies.
Identify opportunities to downgrade and broaden the dissemination of intelligence products while maintaining appropriate protection of sensitive information and compliance with classification and handling requirements.
Develop and maintain Standard Operating Procedures (SOPs) governing intelligence production, review, quality assurance, dissemination, and lifecycle management.
Establish and refine division-wide methodologies for intelligence product development to improve consistency, efficiency, accountability, and analytic quality.
Develop and apply analytic tradecraft standards and evaluation criteria to assess intelligence products for analytical rigor, sourcing, clarity, relevance, confidence, and actionable value.
Establish and maintain production-management processes and tracking mechanisms that provide real-time visibility into intelligence-product pipelines, milestones, dependencies, and deliverables.
Prepare and deliver recurring production-status briefings to senior leadership and cross-functional stakeholders, highlighting progress, priorities, risks, resource constraints, and production bottlenecks.
Develop and maintain intelligence dissemination strategies and distribution lists based on mission priorities, consumer requirements, partner relationships, and intelligence value.
Support efforts to identify, qualify, and prioritize government, industry, and mission partners to maximize the reach and operational impact of cyber intelligence.
Coordinate with government agencies, critical-infrastructure organizations, industry partners, intelligence organizations, and other stakeholders to facilitate timely exchange of actionable cyber threat information.
Translate complex technical findings into clear, concise, and actionable intelligence products tailored to technical, operational, and executive audiences.
Mentor junior analysts and contribute to the development of team-wide analytic standards, processes, methodologies, and best practices.
Identify workflow inefficiencies and recommend process improvements that reduce production delays, improve quality, and increase intelligence dissemination.
Track product development through the intelligence lifecycle and proactively identify issues requiring coordination, escalation, or corrective action.
Perform all duties in accordance with applicable security, classification, handling, privacy, and information-sharing requirements.