Zantech is looking for a talented
Threat Intelligence Analyst to contribute to the success of our upcoming Program Management and Cyber Support Services project for an Onsite role based out of Arlington, VA.
The
Threat Intelligence Analyst will play a crucial role in providing:
- Incident Management and Coordination Support (Intelligence Support)
- Advanced persistent threat (APT) actor analysis
- Intelligence Community and U.S. Cyber Command liaison
- Intelligence support to cyber operations
- Threat intelligence product development
The
Threat Intelligence Analyst serves as serves as a critical interface with the Intelligence Community, providing expert analysis of advanced persistent threat (APT) actors targeting U.S. critical infrastructure. This position supports the mission to counter malicious cyber activities by conducting in-depth threat actor analysis, maintaining awareness of adversary campaigns, and enabling the project to fully leverage its intelligence capabilities during incident response and cyber defense planning.
Impact: Direct support to countering nation-state cyber threats against U.S. critical infrastructure through intelligence-driven cyber defense operations.
Responsibilities include, but will not be limited to:- Support enhancement of technical capabilities ensuring the organization remains at forefront of cybersecurity innovation
- Serve as trusted and knowledgeable point of contact (POC) with Intelligence Community
- Interface with United States Cyber Command and other key stakeholders
- Counter malicious cyber activities conducted by priority advanced persistent threat actors against U.S. critical infrastructure
- Conduct in-depth analysis of APT actor tactics, techniques, and procedures (TTPs)
- Track and assess APT actor capabilities, intentions, and targeting patterns
- Fully leverage intelligence capabilities during incident response
- Support execution of cyber operations through technical analysis and intelligence support
- Provide real-time intelligence support during active cyber incidents
- Inform defensive playbook development with threat intelligence insights
- Aggregate operational inputs and help align resulting actions
- Unify efforts with broader Cybersecurity Division operations through intelligence coordination
- Support collaborative activities with intelligence products
- Produce intelligence assessments, threat profiles, and analytical reports
- Contribute to after-action reports with attribution analysis and lessons learned
- Develop intelligence briefings for various stakeholder audiences
- Support the mission to help prepare for, respond to, and recover from threats
Required Experience or Knowledge of the following technologies/functions:- Experience analyzing advanced persistent threat actors and nation-state cyber operations
- Experience providing intelligence support to cyber operations or incident response
- Experience with threat actor attribution and campaign tracking
- Experience interfacing with IC and DoD cyber organizations
- Skills Required:
- Deep understanding of advanced persistent threat actor tactics, techniques, and procedures
- Knowledge of priority APT actors targeting U.S. critical infrastructure
- Familiarity with Intelligence Community analytical standards and tradecraft
- Understanding of U.S. Cyber Command missions and operations
- Knowledge of critical infrastructure protection requirements per PPD-21
- Understanding of National Cybersecurity Strategy
- Ability to operate effectively in classified environments with IC partners
- Strong analytical and critical thinking skills
- Excellent written and verbal communication for intelligence products and briefings
- Previous Intelligence Community or DoD cyber intelligence experience strongly preferred
- Experience with threat intelligence platforms (TIPs) such as MISP, ThreatConnect, Anomali helpful
- Familiarity with MITRE ATT&CK framework preferred
Required Education/Certifications:- Education Required: None specified
- Education Preferred:
- Bachelor's degree in Intelligence Studies, Cybersecurity, Political Science, International Relations, Computer Science, or related field
- Certifications Required: None specified
- Certifications Preferred:
- GIAC Cyber Threat Intelligence (GCTI)
- GIAC Reverse Engineering Malware (GREM)
- Certified Threat Intelligence Analyst (CTIA)
- Certified Information Systems Security Professional (CISSP)
Required Security Clearance:- US Citizenship and the ability to obtain and maintain an active TS/SCI or higher clearance, per contract requirements.
