Threat Intelligence Analyst [JOB ID 20261023]

Phoenix Cyber • Washington, DC

1d

About The Position

Phoenix Cyber is seeking a Threat Intelligence Analyst with an Operational Technology (OT) focus to join its client delivery team. The role collects and reviews open-source and intelligence reporting to identify cybersecurity threats, then produces actionable threat reports and briefings for cybersecurity analysts. It supports content developers and cybersecurity engineers in identifying gaps in system protection and detection, and reviews system log and network events and alerts for signs of attacks or Advanced Persistent Threats. The analyst performs root cause analysis and supports remediation of OT cybersecurity incidents, serving as the subject matter expert on OT cybersecurity issues.

Phoenix Cyber provides cybersecurity engineering, operations, sustainment, and managed security services to organizations seeking to strengthen their security posture and improve the processes and technology used by their security operations teams. Phoenix Cyber is an equal opportunity employer and participates in E-Verify.

Requirements

• At least 6 years of relevant IT experience.
• At least 2 years of hands-on experience analyzing, securing, or threat-modeling Operational Technology (OT), Industrial Control Systems (ICS), or SCADA environments.
• Working understanding of common industrial communication protocols and lower-level control architecture.
• Demonstrated experience applying ATT&CK for ICS, SPARTA, or Cyber Kill Chain for ICS to analyze adversary campaigns and cyber-physical attack paths.
• Understanding of the NIST Framework.
• Understanding of threats and vulnerabilities in OT environments.
• Active Top Secret Security Clearance.

Responsibilities

• Collect, review, and identify cybersecurity threat intelligence from open-source and intelligence reporting.
• Analyze threat information and provide actionable threat reporting and briefings for cybersecurity analysts.
• Support content developers and cybersecurity engineers in identifying protection and detection gaps in systems.
• Review system log and network events and alerts for signs of attacks or Advanced Persistent Threats.
• Perform root cause analysis and support remediation efforts for OT cybersecurity incidents.
• Act as the subject matter expert on OT cybersecurity issues.

What This Job Offers

• Job Type: Full-time
• Education Level: No Education Listed