Threat Intelligence Analyst

Zantech•Arlington, VA

9d•Onsite

About The Position

Are you looking for your next challenge? Are you ready to work with a performance-based small company? At Zantech, we are a dynamic Woman Owned Small Business focused on providing complex, mission-focused solutions with a proven track record of outstanding customer performance and high employee satisfaction. We would love to talk with you regarding the next step in your career. Come join our team! Zantech is looking for a talented Threat Intelligence Analyst to contribute to the success of our upcoming Program Management and Cyber Support Services project for an Onsite role based out of Arlington, VA. The Threat Intelligence Analyst will play a crucial role in providing: Incident Management and Coordination Support (Intelligence Support) Advanced persistent threat (APT) actor analysis Intelligence Community and U.S. Cyber Command liaison Intelligence support to cyber operations Threat intelligence product development The Threat Intelligence Analyst serves as serves as a critical interface with the Intelligence Community, providing expert analysis of advanced persistent threat (APT) actors targeting U.S. critical infrastructure. This position supports the mission to counter malicious cyber activities by conducting in-depth threat actor analysis, maintaining awareness of adversary campaigns, and enabling the project to fully leverage its intelligence capabilities during incident response and cyber defense planning. Impact: Direct support to countering nation-state cyber threats against U.S. critical infrastructure through intelligence-driven cyber defense operations.

Requirements

Experience analyzing advanced persistent threat actors and nation-state cyber operations
Experience providing intelligence support to cyber operations or incident response
Experience with threat actor attribution and campaign tracking
Experience interfacing with IC and DoD cyber organizations
Deep understanding of advanced persistent threat actor tactics, techniques, and procedures
Knowledge of priority APT actors targeting U.S. critical infrastructure
Familiarity with Intelligence Community analytical standards and tradecraft
Understanding of U.S. Cyber Command missions and operations
Knowledge of critical infrastructure protection requirements per PPD-21
Understanding of National Cybersecurity Strategy
Ability to operate effectively in classified environments with IC partners
Strong analytical and critical thinking skills
Excellent written and verbal communication for intelligence products and briefings
US Citizenship and the ability to obtain and maintain an active TS/SCI or higher clearance, per contract requirements.

Nice To Haves

Previous Intelligence Community or DoD cyber intelligence experience strongly preferred
Experience with threat intelligence platforms (TIPs) such as MISP, ThreatConnect, Anomali helpful
Familiarity with MITRE ATT&CK framework preferred
Bachelor's degree in Intelligence Studies, Cybersecurity, Political Science, International Relations, Computer Science, or related field
GIAC Cyber Threat Intelligence (GCTI)
GIAC Reverse Engineering Malware (GREM)
Certified Threat Intelligence Analyst (CTIA)
Certified Information Systems Security Professional (CISSP)

Responsibilities

Support enhancement of technical capabilities ensuring the organization remains at forefront of cybersecurity innovation
Serve as trusted and knowledgeable point of contact (POC) with Intelligence Community
Interface with United States Cyber Command and other key stakeholders
Counter malicious cyber activities conducted by priority advanced persistent threat actors against U.S. critical infrastructure
Conduct in-depth analysis of APT actor tactics, techniques, and procedures (TTPs)
Track and assess APT actor capabilities, intentions, and targeting patterns
Fully leverage intelligence capabilities during incident response
Support execution of cyber operations through technical analysis and intelligence support
Provide real-time intelligence support during active cyber incidents
Inform defensive playbook development with threat intelligence insights
Aggregate operational inputs and help align resulting actions
Unify efforts with broader Cybersecurity Division operations through intelligence coordination
Support collaborative activities with intelligence products
Produce intelligence assessments, threat profiles, and analytical reports
Contribute to after-action reports with attribution analysis and lessons learned
Develop intelligence briefings for various stakeholder audiences
Support the mission to help prepare for, respond to, and recover from threats