Cyber Threat Intelligence Analyst

Cyber Intelligence Analyst
Locations:
Colorado Springs, Colorado
Rome, New York
El Segundo, California
San Antonio, Texas
Work Type: Full-Time Hybrid
Remote Work: 50%
Job Description
Support cyber threat intelligence and adversary analysis activities to identify, assess, and communicate threats to client systems, networks, missions, and operations. Conduct detailed research and analysis of cyber threat actors, campaigns, infrastructure, malware, vulnerabilities, and tactics, techniques, and procedures using classified and unclassified intelligence sources. Collect, evaluate, correlate, and synthesize technical and intelligence reporting to develop actionable threat assessments, indicators of compromise, and intelligence products. Apply structured analytic techniques and intelligence tradecraft to assess threat actor intent, capability, opportunity, targeting, and potential mission impact. Maintain strict attention to detail when evaluating source reliability, confidence levels, attribution indicators, technical artifacts, and reporting consistency. Use managed attribution and operational security tools to conduct authorized research while protecting analyst identity, organizational attribution, and sensitive collection activities. Support threat research involving language sources, and language reporting, forums, technical publications, and open-source material. Collaborate with penetration testers, red teams, security operations teams, incident responders, vulnerability analysts, intelligence professionals, and mission stakeholders to translate threat intelligence into assessment objectives, defensive priorities, adversary emulation scenarios, and risk-informed recommendations. Contribute to written intelligence products, technical reports, briefings, presentations, and client deliverables while independently managing assigned research and analysis tasks.

Qualifications
2+ years of experience in cyber threat intelligence, all-source intelligence, cyber operations, intelligence analysis, incident response, security operations, or a cybersecurity field
Experience researching cyber threats, malware, vulnerabilities, threat actors, and adversary tactics, techniques, and procedures (TTPs), and producing intelligence assessments, threat reports, or operational briefings
Experience analyzing technical cyber information, including indicators of compromise, malware, infrastructure, network activity, vulnerabilities, and attacker methodologies, while applying analytic frameworks such as MITRE ATT&CK, the Cyber Kill Chain, or the Diamond Model
Experience evaluating intelligence reporting through source validation, analytic confidence, attribution assessment, and identification of intelligence gaps while producing accurate, well-organized, and defensible analytic products
Experience communicating technical and intelligence findings to technical, operational, and executive audiences and collaborating effectively across multidisciplinary cyber, intelligence, engineering, and mission teams
Ability to conduct independent research, manage competing priorities, maintain operational security, and perform effectively in dynamic, fast-paced environments
Ability to show a score of 2/2 on the ILR or DLPT in Arabic, Mandarin Chinese, or Russian
Secret clearance
Bachelor's degree in a Cybersecurity, Intelligence Studies, Computer Science, Information Technology, Engineering, International Relations, Political Science, or Regional Studies field and 2+ years of experience in cybersecurity or threat intelligence, or 6+ years of experience in cybersecurity or threat intelligence in lieu of a degree
DoD 8140 cybersecurity certification, including Security+ certification
Nice To Have Qualifications
Experience using managed attribution, isolated browsing, secure research environments, or operational security platforms to conduct cyber-focused research and intelligence collection
Experience supporting penetration testing, red team operations, adversary emulation, vulnerability assessments, incident response, threat hunting, or security operations center activities
Experience identifying relationships among threat actors, malware families, infrastructure, campaigns, targeting patterns, and geopolitical events to support intelligence production and threat assessments
Experience with Intelligence Community analytic standards, classification guidance, sourcing requirements, dissemination controls, and intelligence handling procedures
Experience with scripting or automation using Python, PowerShell, or similar languages to support cyber research, intelligence analysis, or data processing
Experience with commercial or government cyber threat intelligence platforms such as MISP, OpenCTI, ThreatConnect, Anomali, Recorded Future, or similar technologies
Experience supporting DoD, Intelligence Community, or other federal cyber missions
GCTI, GCIH, GCFA, GCIA, CySA+, CEH, Network+, CISSP, or comparable cyber or intelligence certifications

Clearance:
Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; Secret clearance is required.

Compensation and Benefits
Salary Range: $105,000 - $135,000 (Compensation is determined by various factors, including but not limited to location, work experience, skills, education, certifications, seniority, and business needs. This range may be modified in the future.)

Benefits: Gridiron offers a comprehensive benefits package including medical, dental, vision insurance, HSA, FSA, 401(k), disability & ADD insurance, life and pet insurance to eligible employees. Full-time and part-time employees working at least 30 hours per week on a regular basis are eligible to participate in Gridiron’s benefits programs.

Gridiron IT Solutions is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status or disability status.

Gridiron IT is a Women Owned Small Business (WOSB) headquartered in the Washington, D.C. area that supports our clients' missions throughout the United States. Gridiron IT specializes in providing comprehensive IT services tailored to meet the needs of federal agencies. Our capabilities include IT Infrastructure & Cloud Services, Cyber Security, Software Integration & Development, Data Solution & AI, and Enterprise Applications. These capabilities are backed by Gridiron IT's experienced workforce and our commitment to ensuring we meet and exceed our clients' expectations.