Senior Cybersecurity Analyst - CTI

Job Description
ECS is seeking a Cybersecurity Analyst (Senior) to work in our Huntsville, AL office. Please note: This position is contingent upon contract award.

ECS is seeking a qualified Cybersecurity Analyst (Senior) to support cybersecurity operations for the Federal Bureau of Investigation. You will provide leadership and cyber support for the Cyber Threat Intelligence (CTI) Team, playing a crucial role in the FBI's cybersecurity defense strategy.

The CTI Team is Responsible for monitoring and analyzing external cyber threat data to provide insights and actionable intelligence about potential cyber threats. They shall triage information collected from different threat intelligence sources, including internal sources, and study the pattern of attacks, their methodology, motive, severity, and threat landscape applicable to FBI systems. They shall support enhancing the overall cybersecurity posture of an organization by delivering timely, relevant, information to stakeholders.

As a CTI Analyst, you will be to contribute to our CTI operations by supporting the development and implementation of strategies to identify, analyze, and mitigate cyber threats. You will be involved in generating actionable intelligence that aids our customers in preemptively addressing and responding to cyber incidents. In this role, you will enhance our threat intelligence capabilities through the application of advanced technologies and methodologies, ensuring that our defenses remain robust against adversaries. This position is suited for individuals with a solid understanding of the cyber threat landscape, a keen interest in innovation, and a dedication to achieving excellence in cybersecurity defense.
Responsibilities

• Contribute to the development and implementation of advanced threat intelligence strategies to identify and counteract evolving cyber threats.
• Analyze and interpret intelligence data to provide actionable insights and recommendations, ensuring our customers can effectively mitigate risks.
• Manage and optimize our threat intelligence platform to ensure timely and efficient collection, analysis, and dissemination of threat data.
• Produce comprehensive finished intelligence reports and advisories, detailing threat analysis, forecasts, and actionable recommendations for customers.
• Conduct dark web monitoring and analysis to uncover emerging threats, vulnerabilities, and criminal activities potentially impacting our customers.
• Leverage threat intelligence frameworks such as ATT&CK, F3EAD, the Cyber Kill Chain, and the CTI Lifecycle to identify threats and present proactive measures for risk reduction.
• Provide intelligence briefings and consultations for customers, offering expert insights into threat landscapes, potential impacts, and mitigation strategies.
• Collaborate with cross-functional teams to enhance our cybersecurity program, incorporating cutting-edge technologies and best practices in threat intelligence.
• Mentor and guide a team of threat intelligence analysts, fostering a culture of continuous learning and improvement.
• Engage with customers to communicate threat findings and strategies, ensuring a cohesive and proactive approach to cybersecurity defense.
• Demonstrate advanced proficiency in using threat intelligence platforms and tools for effective data aggregation and analysis.

Required Skills

• Must have a current Top-Secret Clearance with the capability of obtaining SCI / CI-Poly if needed to meet contract requirements
• Expert experience with Splunk Enterprise Security
• SOC Watch Floor Management experience
• Must currently live within commuting distance to Huntsville, AL or be willing to relocate.
• Ability to work independently and as part of a team.
• Deep understanding of network security, endpoint security, and cloud security principles.
• Strong knowledge of cyber threat groups, including their capabilities and motivations.
• Practical experience using the ATT&CK, Cyber Kill Chain, and/or the CTI Lifecyle to operationalize CTI.
• Proficiency in using and managing TIPs for gathering, analyzing, and disseminating threat intelligence.
• Ability to analyze and interpret data to identify potential threats, vulnerabilities, and indicators of compromise (IOCs).
• Must possess exceptional verbal and written communication skills. Proficiency in producing clear, detailed intelligence reports for technical and non-technical audiences. Ability to deliver compelling presentations and briefings to stakeholders, including non-technical audiences.
• Strong collaborative skills to work effectively with cross-functional teams and stakeholders.
• Possess DOD 8570 compliant certification, such as Security+.

Desired Skills

• Knowledge of tools and methods for monitoring and analyzing activities on the dark web that could pose threats.
• Skills in analyzing cyber threat trends and translating technical findings into strategic insights for risk mitigation.
• Skilled in using cybersecurity tools (e.g., SIEM, SOAR, IDS/IPS) and techniques for analyzing and mitigating threats.
• Capability to develop and implement comprehensive threat intelligence strategies and security measures.
• Keeping abreast of the latest cybersecurity trends, threat intelligence methodologies, and technological advancements.
• Ability to manage projects, including setting timelines, coordinating tasks, and ensuring alignment with broader security goals.
• Prior experience in a US Government intelligence analysis role, such as in the US Intelligence Community or Military.
• Prior experience in a security operations role, preferably serving as a senior SOC analyst, incident responder, or threat hunter.
• Possess advanced certifications, such as CISSP, GCTI, C|CTI, GSEC, GCIH, or similar.
• Bachelor's degree; preferably in Computer Science, Information Security, or a related field. Will consider relevant experience in lieu of degree.
• 10 + years of experience, OR Bachelor's degree in relevant field with 7+ years of experience OR; Master's degree in relevant field with 5+ years of experience.
• Experience with Microsoft Sentinel

This position offers a unique opportunity to work in a high-security environment, directly supporting national defense and law enforcement initiatives. If you are passionate about securing mission-critical systems and thrive in a fast-paced, high-stakes environment, we encourage you to apply.

ECS is an equal opportunity employer and does not discriminate or allow discrimination on the basis any characteristic protected by law. All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, or local jurisdiction law.

ECS is a leading mid-sized provider of technology services to the United States Federal Government. We are focused on people, values and purpose. Every day, our 3800+ employees focus on providing their technical talent to support the Federal Agencies and Departments of the US Government to serve, protect and defend the American People.