We are seeking a Cyber Threat Intelligence Analyst to support a federal agency's threat intelligence mission. You will assist in identifying IOCs, producing threat intelligence products, and tracking adversarial TTPs to help the SOC stay ahead of emerging threats to enterprise networks and systems. You will work across both unclassified and classified reporting streams, building the research, writing, and analytic skills needed to grow into a senior intelligence role.

The Work:

• Assist the SOC with identifying valid Indicators of Compromise (IOCs) and implementing appropriate monitoring, alerting, or blocking.
• Contribute to internal and external cyber threat intelligence products for distribution to Federal Partners.
• Compile cyber threat data on present and emerging adversarial tactics, techniques, and procedures through independent research.
• Assist in creating reports on key trends in cyber threat-related technology development affecting enterprise systems.
• Support Cyber Threat Hunt (CTH) by prioritizing threat actor TTPs based on recent intelligence reporting.
• Draft sections of Weekly Highlights and Weekly Activity Reports for senior analyst and lead review.
• Support historical tracking and trend reporting on phishing, malware, and scanning/probing activity.
• Assist with link analysis of technical data to identify patterns in targeting and attack timing.

Required Qualifications & Experience:

• A minimum of one (1) year professional experience in network or UNIX/Linux system administration, software engineering, or software development, and/or a bachelor's degree in a related field.
• A minimum of three (3) years of professional experience in incident detection and response and/or cyber threat intelligence analysis, and a bachelor's degree in Computer Science, Engineering, Information Technology, Cybersecurity, or related field (Cyber Threat Intelligence Analyst specialization).
• One or More of the following certifications: CompTIA A+, Network+, Security+, GSEC, SSCP.

Preferred Qualifications:

• Familiarity with commercial or open-source threat intelligence platforms (MISP, ThreatConnect, Recorded Future, or similar). • Strong analytic writing skills and attention to source citation and confidence-level standards.
• Working knowledge of the MITRE ATT&CK framework.