Job Description

Everforth ECS is seeking a highly experienced Cyber Threat Intelligence (CTI) Analyst – Level 4 to join an enterprise-scale cybersecurity program supporting a major federal civilian agency. This position supports remote work, with preference given to candidates residing in or near the National Capital Region (NCR).

In this role, you will serve as a senior cyber threat intelligence subject matter expert, leading advanced intelligence analysis and providing technical direction for intelligence-driven cybersecurity operations. You will collaborate with cybersecurity leadership, SOC personnel, threat hunters, incident responders, and government stakeholders to evaluate sophisticated adversary activity, establish intelligence priorities, and translate complex threat information into actionable defensive strategies. Your expertise will strengthen intelligence integration, improve proactive threat detection, and support informed cybersecurity risk management decisions that protect mission-critical federal systems and services.

Please Note: This position is contingent upon contract award.

Salary Range: $150,000 - $175,000

Position Responsibilities

• Lead advanced cyber threat intelligence analysis to identify sophisticated threats, adversary campaigns, attack methodologies, and emerging risks affecting enterprise cybersecurity operations.
• Develop and refine threat intelligence collection priorities, analytical requirements, and intelligence production activities in coordination with cybersecurity leadership and government stakeholders.
• Conduct comprehensive assessments of advanced threat actors, adversary capabilities, tactics, techniques, and procedures (TTPs), and potential impacts to mission-critical systems.
• Direct complex intelligence analysis efforts that correlate government, commercial, open-source, and internal security information to identify significant threats and provide actionable recommendations.
• Develop high-quality tactical, operational, and strategic intelligence assessments, executive briefings, threat forecasts, and recommendations that support cybersecurity priorities and risk-based decisions.
• Provide senior-level intelligence expertise to SOC, threat hunting, incident response, and security engineering teams to improve detection coverage, investigative effectiveness, and proactive defensive capabilities.
• Establish and promote intelligence analysis standards, source validation procedures, analytical confidence assessments, and reporting methodologies to ensure intelligence quality and consistency.
• Evaluate the effectiveness of threat intelligence sources, platforms, collection methodologies, and dissemination processes, recommending improvements that strengthen intelligence relevance and operational value.
• Lead efforts to integrate actionable threat intelligence into cybersecurity monitoring, detection engineering, threat hunting, vulnerability prioritization, and incident response workflows.
• Develop intelligence performance measures and assess the effectiveness of intelligence products in supporting cybersecurity operations, situational awareness, and defensive improvements.
• Serve as a senior technical advisor to cybersecurity leadership and government stakeholders, communicating complex threat assessments, emerging risks, and recommended defensive priorities.
• Mentor junior and mid-level intelligence analysts, guide complex analytical activities, and advance intelligence tradecraft, knowledge sharing, and continuous improvement across the cybersecurity program.

Qualifications

• U.S. Citizenship required.
• Remote position, with preference for candidates residing within close proximity to the National Capital Region (NCR).
• Active Public Trust 6C determination, or the ability to obtain and maintain the required determination.
• Bachelor's degree with 10 years of experience, Master's degree with 8 years of experience, or a Ph.D. with 5 years of experience preferably in Cybersecurity, Information Technology, Intelligence Studies, Computer Science, or a related field.
• Demonstrated expertise leading complex cyber threat intelligence assessments, analyzing sophisticated adversary activity, and producing actionable intelligence for enterprise cybersecurity operations.
• Advanced knowledge of threat intelligence tradecraft, adversary TTPs, intelligence collection and analysis methodologies, and frameworks such as MITRE ATT&CK.
• Extensive experience integrating threat intelligence with security operations, threat hunting, incident response, vulnerability management, or detection engineering activities.
• Experience developing intelligence requirements, evaluating intelligence sources, establishing analytical standards, and producing strategic and operational intelligence assessments.
• Strong technical leadership, analytical, communication, and problem-solving skills, with demonstrated ability to advise senior stakeholders, mentor analysts, and translate complex intelligence into actionable recommendations.

Desired Skills

• Experience serving as a senior CTI analyst, intelligence technical lead, or threat intelligence subject matter expert supporting federal civilian agencies or large enterprise cybersecurity programs.
• Extensive experience analyzing advanced persistent threats, nation-state actors, ransomware operations, cybercrime groups, and sophisticated adversary campaigns.
• Experience establishing or maturing cyber threat intelligence programs, analytical methodologies, intelligence requirements, and intelligence-driven cybersecurity processes.
• Advanced familiarity with threat intelligence platforms, information-sharing standards such as STIX/TAXII, and integration with enterprise SIEM, SOAR, and security analytics technologies.
• Experience applying advanced analytics, scripting, automation, or data correlation techniques to improve threat intelligence collection, enrichment, analysis, and dissemination.
• Knowledge of federal cybersecurity intelligence-sharing practices, CISA guidance, relevant NIST frameworks, and government cybersecurity coordination processes.
• Demonstrated experience developing strategic threat assessments, executive intelligence briefings, and risk-based recommendations for senior cybersecurity or government leadership.
• Relevant industry certifications such as GIAC Cyber Threat Intelligence (GCTI), GIAC Certified Incident Handler (GCIH), Certified Information Systems Security Professional (CISSP), or comparable advanced cybersecurity and intelligence credentials.

ECS Federal LLC is an equal opportunity employer and does not discriminate or allow discrimination on the basis any characteristic protected by law. All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, or local jurisdiction law.

Everforth ECS is the federal segment of Everforth, a $4B global organization with over 10,000 employees. Our nearly 3,500 professionals deliver advanced technology solutions in data and AI, cybersecurity, and enterprise transformation, serving defense, intelligence, and federal civilian agencies.

Our work powers mission-critical outcomes, strengthens technology partnerships, and creates meaningful opportunities for our people. We are defined by a commitment to excellence in delivery, a culture of innovation, and an environment where talent can thrive and grow.

We value:

• Attracting and developing top talent and high-performing teams
• Fostering a culture that is engaging, accountable, and mission-driven

Meet the challenge. Make a difference with Everforth ECS!