Cyber Threat Intelligence Analyst

Cyber Threat Intelligence Analyst We are seeking a Cyber Threat Intelligence Analyst to join our Security Operations Center (SOC) team. The role supports analysis and research on the latest advanced cyber threats to provide actionable threat intelligence including adversary indicators of compromise (IOCs), techniques, tactics, and procedures (TTPs), behaviors, and trends to help defend the client agency. The Analyst will conduct analysis to profile threat actor TTPs, produce threat actor cards & profiles, and produce actionable reports and briefings. Responsibilities include collecting, analyzing, and correlating cyber threat intelligence from open‑source, commercial, and government sources, monitoring open‑source intelligence, industry reports, and internal security logs, synthesizing critical insights, conducting tactical, operational, and strategic threat analysis, identifying patterns, attributing attacks, tracking threat actors, phishing campaigns, malware, and relevant TTPs, and supporting development of new detection rules and analytics. Qualifications Experience as a cyber threat analyst collaborating with internal and external stakeholders to gather, vet, enrich intelligence, create joint reports, and share insights. Experience using intelligence platforms such as the MISP Threat Intelligence Platform. Knowledge of CNE and CNA tools, tradecraft, signatures, and TTPs related to preparing for and executing attacks. Knowledge of cyber threats, open‑source research, nation‑state actors, vulnerabilities, and cyber attacks. Ability to prioritize and manage multiple events or initiatives simultaneously. Top Secret clearance. Bachelor’s degree and 15+ years of experience in a cybersecurity threat intelligence, intelligence analysis, or cybersecurity role, or 19+ years of experience in lieu of a degree. Nice to Have Experience working in a SOC or cyber operations environment. Experience working with Splunk, including writing or understanding queries and evaluating telemetry logs. Knowledge of current and emerging adversaries and their TTPs. Knowledge of frameworks such as MITRE ATT&CK, Cyber Kill Chain, STRIDE, or PASTA. Knowledge of Confluence and Jira. Knowledge of ServiceNow or similar ticketing systems. Ability to write and deliver concise briefings, presentations, and reports for varied audiences. Certifications such as CISSP, GCTI, GCIH, CEH, CTIA, or equivalent. Clearance Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information. Top Secret clearance is required. Compensation and Benefits Salary range: $86,800.00 to $198,000.00 (annualized USD). The posting will close within 90 days of the posting date. Benefits include health, life, disability, financial, and retirement plans; paid leave; professional development; tuition assistance; work-life programs; and dependent care. Full‑time and part‑time employees working at least 20 hours a week are eligible for benefit programs. EEO Statement All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran, or any other status protected by applicable federal, state, local, or international law. #J-18808-Ljbffr Booz Allen Hamilton