Senior Cyber Threat Intelligence Analyst

Responsibilities Position Overview The Senior Cyber Threat Intelligence Analyst provides advanced cyber threat intelligence (CTI) analysis, production, tradecraft development, and stakeholder engagement in support of a classified government mission. The analyst is responsible for developing actionable intelligence products, translating complex technical and operational information into decision-ready assessments, and establishing repeatable processes that improve the quality, timeliness, accessibility, and dissemination of intelligence. The position requires demonstrated expertise in cyber threat analysis, intelligence production, analytic tradecraft, product lifecycle management, and collaboration with government, industry, and mission partners. The successful candidate will operate effectively in classified environments and contribute to initiatives that strengthen collective cyber defense across government and critical-infrastructure stakeholders. Key Responsibilities Conduct advanced cyber threat intelligence analysis using classified and open-source reporting, technical data, threat reporting, incident information, and other intelligence sources to identify adversary tactics, techniques, procedures (TTPs), vulnerabilities, and emerging threats. Develop, edit, validate, publish, and appropriately classify or downgrade intelligence products in accordance with established classification guidance, dissemination requirements, and mission objectives. Author and maintain technical Hunt Guides and other operational intelligence products addressing enterprise and industrial-control-system technologies, including network infrastructure, security appliances, operational technology (OT), and industrial control systems (ICS). Support the development and dissemination of intelligence products involving technologies such as Cisco security and network operating systems, Schneider Electric systems, SEL systems, and other critical-infrastructure technologies. Identify opportunities to downgrade and broaden the dissemination of intelligence products while maintaining appropriate protection of sensitive information and compliance with classification and handling requirements. Develop and maintain Standard Operating Procedures (SOPs) governing intelligence production, review, quality assurance, dissemination, and lifecycle management. Establish and refine division-wide methodologies for intelligence product development to improve consistency, efficiency, accountability, and analytic quality. Develop and apply analytic tradecraft standards and evaluation criteria to assess intelligence products for analytical rigor, sourcing, clarity, relevance, confidence, and actionable value. Establish and maintain production-management processes and tracking mechanisms that provide real-time visibility into intelligence-product pipelines, milestones, dependencies, and deliverables. Prepare and deliver recurring production-status briefings to senior leadership and cross-functional stakeholders, highlighting progress, priorities, risks, resource constraints, and production bottlenecks. Develop and maintain intelligence dissemination strategies and distribution lists based on mission priorities, consumer requirements, partner relationships, and intelligence value. Support efforts to identify, qualify, and prioritize government, industry, and mission partners to maximize the reach and operational impact of cyber intelligence. Coordinate with government agencies, critical-infrastructure organizations, industry partners, intelligence organizations, and other stakeholders to facilitate timely exchange of actionable cyber threat information. Translate complex technical findings into clear, concise, and actionable intelligence products tailored to technical, operational, and executive audiences. Mentor junior analysts and contribute to the development of team-wide analytic standards, processes, methodologies, and best practices. Identify workflow inefficiencies and recommend process improvements that reduce production delays, improve quality, and increase intelligence dissemination. Track product development through the intelligence lifecycle and proactively identify issues requiring coordination, escalation, or corrective action. Perform all duties in accordance with applicable security, classification, handling, privacy, and information-sharing requirements. Qualifications Required Qualifications Bachelor's degree in Cybersecurity, Intelligence Studies, Computer Science, Information Technology, Engineering, or a related field; equivalent professional experience may be considered. 12+ years of relevant experience in cyber threat intelligence, cybersecurity analysis, intelligence operations, cyber defense, or a related discipline; Minimum of 10 years with MS/MA; Minimum of 7 years with Ph.D. Active TS or Q clearance or higher is required.  Ability to obtain Q/SCI. Demonstrated experience producing intelligence assessments, threat reports, hunt guides, analytic products, or other operationally focused CTI products. Demonstrated understanding of cyber threat intelligence lifecycle principles, including collection, processing, analysis, production, dissemination, and feedback. Strong knowledge of adversary TTPs, cyber kill chain concepts, MITRE ATT&CK, network security, vulnerability exploitation, malware, intrusion activity, and defensive cyber operations. Experience analyzing threats to operational technology (OT), industrial control systems (ICS), critical infrastructure, or other specialized environments. Demonstrated experience developing SOPs, analytic standards, production methodologies, or other process-improvement frameworks. Experience managing intelligence-product pipelines, production schedules, task tracking, or workflow-management processes. Experience developing intelligence dissemination strategies and tailoring products to different intellig