Cyber Intelligence Analyst, Senior

We are seeking a highly skilled and innovative Cyber Intelligence Analyst to join our team in the greater DMV area, supporting the Army National Guard.

Responsibilities

• Lead collection, fusion, and analysis of threat data from telemetry, external intelligence, and government sources to produce actionable cyber intelligence.
• Develop advanced threat assessments, adversary profiles, campaign analyses, and strategic intelligence products mapped to MITRE ATT&CK.
• Identify indicators of compromise and prioritize detection/use‑case opportunities to inform SOC, CIRT, RCC‑ARNG, NETCOM, and ARCYBER operations.
• Oversee intelligence enrichment workflows, lifecycle processes, and analytic fusion of technical indicators with operational and geopolitical context.
• Coordinate with detection engineering and threat‑hunting teams to translate intelligence into correlation rules, signatures, and hunt hypotheses.
• Review high‑priority incidents to validate correlations, attribute activity, and recommend defensive or remediation actions.
• Produce decision‑grade reports, executive briefs, and summaries that inform leadership and shape cyber defense strategy.
• Evaluate new data sources and analytic techniques to improve modeling, forecasting, and enterprise threat‑coverage metrics.

#ENOCS

Qualifications

• Minimum of 8 years with BS/BA; Minimum of 6 years with MS/MA; Minimum of 3 years with PhD

• Clearance: Active TS/SCI clearance.

• Candidate must meet ONE of the following:

  • Master’s degree or Ph.D. in Strategic Intelligence, Cybersecurity Risk Management, Computer Science, Data Science, Information Systems, Information Technology, or a related field; OR
  • Relevant DoD/military advanced training (examples: DIA Advanced Cyber Threat Analysis; National Cryptologic School advanced cyber intelligence courses; SANS FOR578); OR
  • Relevant professional certification or equivalent experience (examples: CISSP, CASP+, GIAC GCIA, GIAC GREM, CREST CCTIM).

• Required experience and skills:

  • Intelligence/analytic experience with at least 3 years performing cyber threat intelligence, incident analysis, or related analytic roles in enterprise or DoD contexts.
  • Strong expertise mapping adversary TTPs to MITRE ATT&CK, indicator development, and campaign attribution.
  • Proficiency with telemetry and intelligence platforms, analytic tooling, threat‑intelligence platforms (TIPs), and data enrichment methods.
  • Ability to produce clear, evidence‑based intelligence products and executive briefings for technical and senior leadership audiences.
  • Experience coordinating intelligence support to detection engineering, SOC/CIRT operations, and cross‑organizational stakeholders.

• Desired:

  • Prior experience supporting ARNG, NETCOM, ARCYBER, or joint/IC cyber intelligence operations.
  • Familiarity with malware analysis, reverse engineering outputs, and operational tradecraft used in advanced persistent threat investigations.
  • Experience integrating OSINT/CTI feeds, commercial TI, and government reporting into consolidated analytic workflows.

#ENOCS