Cyber Threat Intelligence (CTI) Analyst – Level 1

Everforth ECS is seeking a Cyber Threat Intelligence (CTI) Analyst – Level 1 to join an enterprise-scale cybersecurity program supporting a major federal civilian agency. This position supports remote work, with preference given to candidates residing in or near the National Capital Region (NCR).

In this role, you will support cyber threat intelligence collection, analysis, and reporting activities that help identify emerging threats and strengthen enterprise cybersecurity defenses. You will work alongside experienced intelligence analysts, SOC personnel, threat hunters, and cybersecurity professionals to research threat activity, analyze indicators of compromise, and provide actionable intelligence that supports detection and response operations. Your contributions will improve threat awareness, strengthen defensive readiness, and support the protection of mission-critical federal systems and sensitive information.

Please Note: This position is contingent upon contract award.

Salary Range: $80,000 - $100,000

Position Responsibilities

• Collect, review, and organize cyber threat intelligence from government, commercial, open-source, and internal security information sources.

• Monitor emerging threats, vulnerabilities, adversary campaigns, and cybersecurity advisories to identify information relevant to enterprise security operations.

• Conduct initial analysis and enrichment of indicators of compromise (IOCs), including suspicious IP addresses, domains, file hashes, and other threat artifacts.

• Support the identification and documentation of adversary tactics, techniques, and procedures (TTPs) using established frameworks such as MITRE ATT&CK.

• Assist with correlating threat intelligence against security alerts, vulnerability information, and enterprise assets to identify potentially relevant threats.

• Prepare threat intelligence summaries, alerts, reports, and other products that communicate findings to cybersecurity teams and stakeholders.

• Maintain threat intelligence records, indicator repositories, and supporting documentation to ensure information accuracy, traceability, and accessibility.

• Collaborate with SOC analysts, threat hunters, and incident response personnel to provide relevant threat intelligence and supporting investigative context.

• Follow established intelligence analysis procedures, source evaluation practices, information handling requirements, and reporting standards.

• Participate in intelligence reviews, knowledge-sharing activities, and continuous improvement efforts to strengthen intelligence quality and operational relevance.

• U.S. Citizenship required.

• Remote position, with preference for candidates residing within close proximity to the National Capital Region (NCR).

• Active Public Trust 6C determination, or the ability to obtain and maintain the required determination.

• High school diploma with 8 years of experience, Bachelor's degree with 2 years of experience, or Masters degree preferably in Cybersecurity, Information Technology, Intelligence Studies, Computer Science, or a related field. 

• Foundational understanding of cybersecurity threats, vulnerabilities, attack techniques, and common indicators of compromise.

• Familiarity with cyber threat intelligence concepts, intelligence collection, open-source research, and basic analytical methodologies.

• Basic understanding of enterprise networks, operating systems, security technologies, and common cyberattack methods.

• Strong research, analytical, organizational, and documentation skills, with attention to information accuracy and detail.

• Effective written and verbal communication skills, with the ability to follow established procedures and collaborate with cybersecurity professionals.