Threat Intelligence Analyst [JOB ID 20260923]

Phoenix Cyber • Washington, DC

2d

About The Position

Phoenix Cyber is looking for a Threat Intelligence Analyst with an Operational Technology (OT) focus to join their client delivery team. This role involves collecting, reviewing, and analyzing cybersecurity threat intelligence from various sources to provide actionable reporting and briefings. The analyst will support content developers and cybersecurity engineers by identifying protection and detection gaps, reviewing system logs for signs of attack or Advanced Persistent Threats, and performing root cause analysis for OT cybersecurity incidents. The position requires acting as a Subject Matter Expert on OT cybersecurity issues.

Requirements

• Minimum 6 years of relevant IT experience
• Minimum 2 years of hands-on experience analyzing, securing, or threat-modeling Operational Technology (OT), Industrial Control Systems (ICS), or SCADA environments (Experience limited to enterprise IT security will not satisfy this requirement.)
• Working understanding of common industrial communication protocols and lower-level control architecture.
• Demonstrated experience applying ATT&CK for ICS, SPARTA, or Cyber Kill Chain for ICS to dissect adversary campaigns and analyze cyber-physical attack paths.
• Understanding of the NIST Framework
• Understanding of threats and vulnerabilities in OT environments.
• Must have an active Top Secret Security Clearance

Responsibilities

• Collects, reviews, and identifies cybersecurity threat intelligence from open source and intelligence reporting to analyze and provide actionable threat reporting and briefings for cybersecurity analysts.
• Provides support to content developers and cybersecurity engineers in identifying gaps in protection and detection of systems.
• Reviews log and network events and alerts related to systems for signs of attack or Advanced Persistent Threats.
• Performs root cause analysis and supports remediation efforts for incidents related to Operational Technology cybersecurity incidents.
• Acts as the Subject Matter Expert on OT cybersecurity related issues.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed