Cyber Threat Intelligence Analyst
Core
Support a federal agency's threat intelligence mission by identifying IOCs, producing threat intelligence products, and tracking adversarial TTPs to help the SOC stay ahead of emerging threats.
Role type
Cyber Threat Intelligence Analyst
Builds
Internal and external cyber threat intelligence products for distribution to Federal Partners
Domain
US Federal Government Cybersecurity
Required skills
Incident detection and response, Cyber threat intelligence analysis, Network or UNIX/Linux system administration, Software engineering, Software development, Analytic writing, Source citation, MITRE ATT&CK framework, Link analysis, Phishing analysis, Malware analysis, Scanning/probing activity tracking
Preferred skills
Commercial or open-source threat intelligence platforms (MISP, ThreatConnect, Recorded Future)
Technologies
MISP, ThreatConnect, Recorded Future, MITRE ATT&CK
Responsibilities
Identify valid Indicators of Compromise (IOCs) and implement monitoring, alerting, or blocking. Contribute to internal and external cyber threat intelligence products. Compile cyber threat data on adversarial tactics, techniques, and procedures. Create reports on key trends in cyber threat-related technology development. Support Cyber Threat Hunt by prioritizing threat actor TTPs. Draft sections of Weekly Highlights and Weekly Activity Reports. Support historical tracking and trend reporting on phishing, malware, and scanning/probing activity. Assist with link analysis of technical data to identify patterns in targeting and attack timing.
Seniority
Mid-level, hands-on IC