Cybersecurity Operations Analyst & Cyber Threat Intelligence Lead
Core
Lead the Cyber Threat Intelligence (CTI) program and serve as a Tier 2/3 escalation point for complex security incidents and advanced threat analysis.
Role type
Senior IC Cybersecurity Operations Analyst & CTI Lead
Builds
Strategic, operational, and tactical intelligence products; advanced detection rules; incident response playbooks
Domain
Defense/Aerospace Cybersecurity
Required skills
Cyber threat intelligence analysis, incident response, all-source intelligence analysis, SIEM query development, threat intelligence platform management, malware analysis, network traffic analysis, MITRE ATT&CK framework expertise, adversary tracking, structured analytic techniques
Preferred skills
ThreatConnect, Anomali, MISP, Recorded Future, SOAR platforms, cloud security operations, reverse engineering, scripting (Python, PowerShell, Bash), compliance frameworks (NIST 800-53, 800-171, CMMC)
Technologies
Google SecOps, QRadar, LogRhythm, ArcSight, ThreatConnect, Anomali, MISP, Recorded Future, Wireshark, tcpdump, Zeek, Suricata, Snort
Responsibilities
Lead CTI program strategy and roadmap development; conduct deep-dive investigations into APTs and sophisticated threats; produce intelligence briefings for leadership; mentor junior analysts; integrate threat intelligence into detection workflows; analyze malware and attacker tools
Seniority
Senior, hands-on IC with program leadership
