Threat Intelligence Analyst

Insitu Inc•Bingen, WA

1d•$99,200 - $136,400•Hybrid

About The Position

Join our dynamic Security team and help protect our organization from evolving threats. We are seeking a Threat Intelligence Analyst with expertise in investigative analysis, threat intelligence, digital forensic, security monitoring, and risk mitigation. Your work will directly support our Insider Threat Program, cybersecurity program, and broader information security initiatives, helping safeguard critical assets and ensure compliance with security best practices. Help protect classified information systems and sensitive organizational data from internal and external threats.

Requirements

Technical bachelor’s degree and 5 or more years related work experience or a master’s degree with 3 or more years or equivalent work experience.
Proven experience in threat intelligence, insider threat analysis, cyber security, and information security investigations.
Strong analytical skills; ability to review and assess intelligence and monitor indicators of compromise.
Experience with intelligence aggregation tools, vulnerability assessment, and risk remediation.
Proficiency in forensic analysis, log analysis, penetration testing, and malware investigation.
Excellent written and verbal communication skills, capable of producing clear investigative and security reports.
Knowledge of security architecture, firewalls, and safeguarding procedures.
Familiarity with incident response and recovery steps for security breaches.
Meticulous attention to detail and strong problem-solving skills, ensuring thorough analysis and effective threat response.
Demonstrated ability to exercise discretion, maintain confidentiality, and handle sensitive information appropriately.
Ability to obtain and maintain a U.S. Government security clearance
Familiarity with scripting or automation (e.g. python, powershell)
Knowledge of RMF and government cybersecurity guidance (e.g., NIST SP 800-53, NIST SP 800-171, CNSSI 1253), and related authorization frameworks.
Experience or familiarity with common information security tools, such as: EDR, Firewall, SIEM, Email Archiver, SEG, DSP, Forensic Suites, eDiscovery, UBA, MDM, and HW/SW write blockers

Nice To Haves

Degree in Information Security, Cyber Security, Computer Science, Criminal Justice or related field preferred.
Professional cybersecurity or forensic certification desired (e.g. A+, Security+, CISSP, GCIA, GCFA, GCFE, CFCE, ENCE, or similar)

Responsibilities

Use intelligence aggregation tools to review and assess potential insider threats.
Monitor for concerning behaviors and escalate high-risk incidents for investigation.
Conduct investigative activities including forensic acquisition and analysis of digital assets, interview planning, gathering statements, and resolving allegations.
Recover stolen intellectual property and perform forensic analysis of systems or malware as required.
Produce clear, detailed reports documenting investigative findings, outcomes, and security incidents.
Partner with Security, HR, Legal, and other stakeholders to coordinate investigations and remedial actions
Develop and refine investigation metrics, dashboards, case studies, and trend analyses to support program improvement and decision-making
Plan, implement, upgrade, and monitor computer network/information security measures and controls.
Serve as ISSO/ISSM for multiple classified information systems, ensuring compliance with applicable government and organizational cyber security requirements.
Identify security needs and develop system security plans; coordinate implementation of security architecture and applications.
Oversee security sustainment activities including account management, media protection, audit logging, and secure file processes
Perform risk assessments, penetration testing, system log analysis, and vulnerability evaluations.
Develop and execute risk remediation plans, recommend security technologies.
Conduct user compliance monitoring and address organizational security deficiencies.
Develop, deliver, and update security awareness training and materials.
Assist with maintaining ongoing security infrastructure, update cyber protection measures, and research or develop incident response tools and processes.
Produce intelligence products (alerts, briefs, reports) that translate complex technical findings into clear, actionable guidance for stakeholders.
Perform proactive threat hunting in classified and unclassified environments to identify anomalous behavior and previously undetected threats.