Threat Intelligence Analyst – Level IV – Manager / Lead

Everforth ECS is seeking a highly experienced Cyber Threat Intelligence (CTI) Analyst – Level 4 to join an enterprise-scale cybersecurity program supporting a major federal civilian agency. This position supports remote work, with preference given to candidates residing in or near the National Capital Region (NCR).

In this role, you will serve as a senior cyber threat intelligence subject matter expert, leading advanced intelligence analysis and providing technical direction for intelligence-driven cybersecurity operations. You will collaborate with cybersecurity leadership, SOC personnel, threat hunters, incident responders, and government stakeholders to evaluate sophisticated adversary activity, establish intelligence priorities, and translate complex threat information into actionable defensive strategies. Your expertise will strengthen intelligence integration, improve proactive threat detection, and support informed cybersecurity risk management decisions that protect mission-critical federal systems and services.

Please Note: This position is contingent upon contract award.

Salary Range: $150,000 - $175,000

Position Responsibilities

• Lead advanced cyber threat intelligence analysis to identify sophisticated threats, adversary campaigns, attack methodologies, and emerging risks affecting enterprise cybersecurity operations.

• Develop and refine threat intelligence collection priorities, analytical requirements, and intelligence production activities in coordination with cybersecurity leadership and government stakeholders.

• Conduct comprehensive assessments of advanced threat actors, adversary capabilities, tactics, techniques, and procedures (TTPs), and potential impacts to mission-critical systems.

• Direct complex intelligence analysis efforts that correlate government, commercial, open-source, and internal security information to identify significant threats and provide actionable recommendations.

• Develop high-quality tactical, operational, and strategic intelligence assessments, executive briefings, threat forecasts, and recommendations that support cybersecurity priorities and risk-based decisions.

• Provide senior-level intelligence expertise to SOC, threat hunting, incident response, and security engineering teams to improve detection coverage, investigative effectiveness, and proactive defensive capabilities.

• Establish and promote intelligence analysis standards, source validation procedures, analytical confidence assessments, and reporting methodologies to ensure intelligence quality and consistency.

• Evaluate the effectiveness of threat intelligence sources, platforms, collection methodologies, and dissemination processes, recommending improvements that strengthen intelligence relevance and operational value.

• Lead efforts to integrate actionable threat intelligence into cybersecurity monitoring, detection engineering, threat hunting, vulnerability prioritization, and incident response workflows.

• Develop intelligence performance measures and assess the effectiveness of intelligence products in supporting cybersecurity operations, situational awareness, and defensive improvements.

• Serve as a senior technical advisor to cybersecurity leadership and government stakeholders, communicating complex threat assessments, emerging risks, and recommended defensive priorities.

• Mentor junior and mid-level intelligence analysts, guide complex analytical activities, and advance intelligence tradecraft, knowledge sharing, and continuous improvement across the cybersecurity program.

• U.S. Citizenship required.

• Remote position, with preference for candidates residing within close proximity to the National Capital Region (NCR).

• Active Public Trust 6C determination, or the ability to obtain and maintain the required determination.

• Bachelor's degree with 10 years of experience, Master's degree with 8 years of experience, or a Ph.D. with 5 years of experience preferably in Cybersecurity, Information Technology, Intelligence Studies, Computer Science, or a related field. 

• Demonstrated expertise leading complex cyber threat intelligence assessments, analyzing sophisticated adversary activity, and producing actionable intelligence for enterprise cybersecurity operations.

• Advanced knowledge of threat intelligence tradecraft, adversary TTPs, intelligence collection and analysis methodologies, and frameworks such as MITRE ATT&CK.

• Extensive experience integrating threat intelligence with security operations, threat hunting, incident response, vulnerability management, or detection engineering activities.

• Experience developing intelligence requirements, evaluating intelligence sources, establishing analytical standards, and producing strategic and operational intelligence assessments.

• Strong technical leadership, analytical, communication, and problem-solving skills, with demonstrated ability to advise senior stakeholders, mentor analysts, and translate complex intelligence into actionable recommendations.