cyber intelligence analyst

State of Utah

<div>
 
 FT / PT Status &ndash;
 
 Full-Time
 
 Salary &ndash;
 
 $35.00 - $35.00 Hourly Wage
 
 Remote Work / In-Office &ndash;
 
 Hybrid
 
 Recruiter &ndash;
 
 Laura Alexander | LAlexander@utah.gov | 801-903-3138
 
 Application Deadline &ndash;
 
 4/21/2026
 
 
 
 Cyber Threat Intelligence Analyst- SIAC
 
 
 
 Are you looking for a career in the information security and criminal justice field? The Utah Statewide Information &amp; Analysis Center (SIAC) is an amazing step on your career path. You'll be able to provide assistance to the citizens of Utah and make a difference in our communities.
 
 
 Serve as a Cyber Threat Intelligence Analyst with specialties in strategic intelligence production, technical analysis, cyber threat hunting, and/or cyber outreach coordination. Conduct research regarding threat groups and evaluate intelligence on criminal tactics, techniques, and procedures. Analyze events to determine the impact on current operations and conduct research to determine adversary capability and intent. This may include giving and producing intelligence briefings, training, presentations, and organizing collaborative groups and outreach programs. Conduct outreach to increase security awareness and notification of specific threats. Cyber Threat Intelligence Analysts perform entry level Information Security related duties in the areas of cybersecurity.
 
 
 
 As a Cyber Threat Intelligence Analyst, You Will
 
 
 
 <ul>
 <li>
 Collect and document raw information for further analysis and evaluation.
 </li>
 <li>
 Assess and analyze cyber threats and vulnerabilities and disseminate intelligence reports to stakeholders.
 </li>
 <li>
 Assist law enforcement with network analysis and criminal investigations.
 </li>
 <li>
 Coordinate and participate in necessary outreach to law enforcement, public and private sector, and cybersecurity professionals.
 </li>
 <li>
 Perform statistical and intelligence analysis by applying analytical tradecraft and best practices in analyzing data and reaching accurate conclusions.
 </li>
 <li>
 Analyze, summarize and/or review data; report findings, interpret results and/or make recommendations.
 </li>
 <li>
 Write or draft raw and finished intelligence reports, articles or related material based on research, investigation or analysis.
 </li>
 <li>
 Form conclusions and develop recommendations for detection, deterrence, disruption and mitigation.
 </li>
 <li>
 Participate in community working groups or teams or other related assignments as needed/directed.
 </li>
 <li>
 Ensure the integrity and protection of networks, systems, and applications through cyber threat and network monitoring, performing on-demand vulnerability assessments, and investigations and reporting of incidents.
 
 
 </li>
 </ul>
 
 Qualifications
 
 
 
 
 Ideal Candidate:
 
 
 
 <ul>
 <li>
 Demonstrated skill in intelligence analysis and critical thinking
 </li>
 <li>
 Demonstrated skill in social media research and analysis
 </li>
 <li>
 Working level experience in the use of databases for entering data, searching and exploiting information and the development of intelligence to inform decision makers,
 </li>
 <li>
 Working level skills in spreadsheets, statistics, and Microsoft Office Suite
 </li>
 <li>
 Working level analytic report writing and presentations skills
 </li>
 <li>
 Demonstrated experience in security operations (SIEMs), network monitoring, and vulnerability management platforms (Tenable, Nessus, etc.)
 </li>
 <li>
 Knowledge of malware analysis concepts, methods, and techniques
 
 
 </li>
 </ul>
 
 Preference May Be Given To Applicants Who Currently
 
 
 
 <ul>
 <li>
 Have SECRET National Security Clearance and have experience with Intelligence Analysis, Targeting, Information Security
 </li>
 <li>
 Have experience working on task forces or similar environments
 </li>
 <li>
 Have industry-recognized cybersecurity-related certifications (GIAC, CompTIA, etc.)
 </li>
 <li>
 Are a DPS employee
 
 
 </li>
 </ul>
 
 Additional Information
 
 
 
 <ul>
 <li>
 This position requires the successful candidate to be willing and available to travel both in state and out of state, including overnight stays when necessary.
 </li>
 <li>
 A level II background will be completed on candidates who accept a verbal, conditional offer.
 </li>
 <li>
 What does it mean to qualify to hold a security clearance? Please visit- https://www.ecfr.gov/current/title-32/subtitle-A/chapter-I/subchapter-D/part-147
 </li>
 <li>
 Attend Subject Matter Expertise development training for this position.
 </li>
 <li>
 Completion of SECRET National Security Clearance submission packet (if clearance is not currently held by successful candidate).
 </li>
 <li>
 Only candidates selected for an interview will be contacted
 
 
 </li>
 </ul>
 
 About The Role
 
 
 
 
 Location
 
 &ndash;
 
 
 4501 S 2700 W, Po Box 148285
 
 
 Salt Lake City, Utah, 84114-8285
 
 
 United States
 
 
 
 Background Check Required
 
 &ndash; You must successfully pass a criminal history check.
 
 
 
 Drug Test Required
 
 &ndash; No
 
 
 
 Schedule Code
 
 &ndash; B - Competitive Career Service
 
 
 
 Why You Should Join Our Team
 
 
 
 
 Benefits
 
 
 
 In Utah, we believe hard work is important, but balance is essential. Finding work/life balance is a vital element to our culture. To find out more about WHY Utah , click here . Other benefits may include:
 
 
 <ul>
 <li>
 Job Stability: Enjoy the security and reliability of employment within a well-established organization.
 </li>
 <li>
 Career Growth: Develop valuable skills and gain opportunities for leadership within a large organization.
 </li>
 <li>
 Meaningful Work: Contribute to an important service that benefits the community and supports organizational goals.
 </li>
 <li>
 Supportive Work Environment: Be part of a team that values cooperation, strong work ethics, and mutual support.
 
 
 </li>
 </ul>
 
 The Agency
 
 The Utah Department of Public Safety (DPS) is comprised of 12 divisions and bureaus that include the Utah Highway Patrol, the Division of Emergency Management, Driver License division, Statewide Information and Analysis Center (SIAC), State Bureau of Investigation (SBI), State Fire Marshal, Highway Safety Office, Communications, State Crime Lab, Bureau of Criminal Identification, and Peace Officers Standards and Training (POST). The DPS dive team, aero bureau, CERT team and Public Protection Unit (PPU) also fall under the Department of Public Safety. DPS is made up of more than 1,500 state employees who are stationed across Utah.
 
 
 The Department of Public Safety offers a unique and rewarding employment opportunity. More information about our agency can be found on www.dps.utah.gov.
 
 
 
 EEO Statement
 
 The State of Utah is committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity, or Veteran status. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. For accommodations, please contact (801) 957-9390.
</div>

Cyber Threat Intelligence Analyst

INFRA ASSURE

JOB TITLE: Cyber Threat Intelligence (CTI) SpecialistLOCATION: Qatar / Remote | TYPE: Contract / Full-time | LEVELS: 3&ndash;5 yrs / 5&ndash;10 yrs / 10&ndash;20 yrsABOUT THE ROLEWe are recruiting a Cyber Threat Intelligence Specialist to provide a government client in Qatar with timely, contextualized intelligence on threats relevant to their environment. You will function as the primary point for strategic, operational, and tactical threat intelligence &mdash; supporting SOC, Incident Response, and leadership with actionable intelligence products and driving threat-informed defence.KEY RESPONSIBILITIES- Collect and correlate threat data from internal telemetry, OSINT, commercial feeds, and community/government sources.- Analyze threat actors, campaigns, malware, and TTPs, mapping them to MITRE ATT&amp;CK and to client assets and use cases.- Produce intelligence reports, alerts, and advisories including IOCs, recommended countermeasures, and risk context.- Enrich SOC detections and SIEM/EDR rules with contextual intelligence to improve detection fidelity and prioritization.- Collaborate with Incident Response to provide adversary profiles, pivot points, and hypotheses during active investigations.- Lead or support threat-hunting exercises using intelligence-driven hypotheses to proactively search for unknown compromises.- Maintain an intelligence knowledge base tracking trends, historical incidents, and lessons learned.REQUIRED EXPERIENCE- 3&ndash;20 years of experience in threat intelligence, threat hunting, or security operations.- Deep knowledge of MITRE ATT&amp;CK, threat actor TTPs, and intelligence lifecycle management.- Hands-on experience with OSINT tools and techniques for adversary research.- Experience with SIEM platforms, threat intelligence platforms (TIPs), and IOC management.- Ability to produce both technical and strategic intelligence reports for varied audiences.- Experience analyzing malware, phishing campaigns, and nation-state or APT group activity.- Familiarity with threat-sharing frameworks: STIX/TAXII, MISP, or equivalent.- Government or critical infrastructure sector experience is a strong advantage.PREFERRED CERTIFICATIONSCandidates holding two or more of the following certifications will be viewed very favourably:- GCTI (GIAC Cyber Threat Intelligence) - the most directly relevant cert for this role- CTIA (Certified Threat Intelligence Analyst, EC-Council) - strongly preferred- GOSI (GIAC Open Source Intelligence) - valued for OSINT-heavy work- CISSP - valued for senior-level candidates (Level 1)- CISM - valued for senior candidates bridging intelligence and governance- CompTIA Security+ - good baseline for Level 3 candidates entering CTI from SOCWHAT WE OFFER- Engagement supporting a high-profile government client in Qatar.- Multiple experience levels considered: junior (3&ndash;5 yrs), mid (5&ndash;10 yrs), and senior (10&ndash;20 yrs).- Competitive contract rate aligned with experience level.- Opportunity to work on national-scale threat intelligence programmes.Job Type: Full-timeApplication Question(s):<ul><li>How soon can you join if selected?</li></ul>Work Location: Remote

Cyber Threat Intelligence (CTI) Specialist

General Dynamics Information Technology

<div><div><div>Your Impact
Own your opportunity to support our nation's defense. Make an impact by connecting and securing critical operations across the globe, keeping our country safe and secure.
Job Description<div>
Cyber Intelligence Specialist (CTIC) - TS/SCI Clearance Required 
 
MEANINGFUL WORK AND PERSONAL IMPACT
As a Cyber Intelligence Specialist at GDIT, you will:<ul><li>
Analyze cyber adversary capabilities by assessing the intentions of adversary groups to conduct Computer Network Exploitation (CNE) and Computer Network Attack (CNA) against ARNG assets.</li><li>
Evaluate cyber intelligence reports from sources such as DISA, Army, RCC-NG, US-CERT, ARCYBER, NETCOM, and CYBERCOM (up to TS/SCI levels).</li><li>
Identify emerging threats to hardware and software, recommend risk mitigations, countermeasures, and detection strategies as part of an overarching Computer Network Defense (CND) strategy.</li><li>
Develop and disseminate actionable cyber intelligence based on adversary Tactics, Techniques, and Procedures (TTPs). Collaborate on the development of enterprise playbooks for automation and orchestration.</li><li>
Integrate cyber threat intelligence with enterprise vulnerability and asset management data to provide situational awareness to ARNG leadership, RCC-NG teams, SOC analysts, incident responders, and decision-makers.</li><li>
Proactively identify scalable cybersecurity solutions to enhance existing processes.</li><li>
Collaborate across multidisciplinary teams to troubleshoot, innovate, and strengthen overall defenses.</li></ul><div> 
WHAT YOU&rsquo;LL NEED TO SUCCEED 
<ul><li>Education: Bachelor&rsquo;s degree in Cybersecurity, Information Assurance, Computer Science, or related technical discipline (OR equivalent combination of education, certifications, and experience).</li></ul></div><ul><li>Experience: 5+ years of experience in cybersecurity, IT, or information assurance, with expertise in: Cyber Threat Intelligence Tools/Data Feeds: Skilled in integrating news feeds, threat briefs, vulnerability alerts, and technical incident reports. Processes: Threat mitigation methods and CND implementation practices.</li><li>Technical skills:</li></ul><ul><li>
Experience with Red Hat Linux and Windows Server Administration (2+ years).</li><li>
Proficiency with SIEM platforms (e.g., Splunk, Elastic Search) and compliance tools such as SCAP and DISA STIGs (4+ years).</li><li>
Scripting expertise in PowerShell, Python, or BASH.</li><li>
Familiarity with TLS/SSL certificate implementation and management.</li><li>
Nice-to-Have: Experience with VMware ESXi, NetApp SAN storage, or Apache Kafka.</li></ul><ul><li>Security clearance level: Active TS/SCI required.</li><li>US citizenship required</li><li>Certifications/Role requirements: Baseline Certification: DoW 8570.01-M IAT Level II (e.g., CompTIA Security+ CE) prior to start. Additional computing environment certification (e.g., CEH, CCNA-Security) required within six months of hire. When 8140 requirements are implemented on program/contract, employees will need to conform to 8140 certification standards.</li></ul><div> 
GDIT IS YOUR PLACE 
At GDIT, the mission is our purpose, and our people are at the center of everything we do. 
<ul><li>Growth: AI-powered career tool that identifies career steps and learning opportunities</li><li>Support: An internal mobility team focused on helping you achieve your career goals</li><li>Rewards: Comprehensive benefits and wellness packages, 401K with company match, and competitive pay and paid time off</li><li>Flexibility: Full-flex work week to own your priorities at work and at home.</li><li>Community: Award-winning culture of innovation and a military-friendly workplace</li></ul> 
OWN YOUR OPPORTUNITY 
Explore a career in cyber at GDIT and you&rsquo;ll find endless opportunities to grow alongside colleagues who share your focus on defending and protecting what matters.</div>
#GDITPriority
#GECOS
</div></div><div><div><div>Work Requirements</div></div><div></div><div><div>
Years of Experience<div>
5 + years of related experience</div><ul><li>may vary based on technical training, certification(s), or degree</li></ul></div><div></div><div>
Certification
Certified Ethical Hacker (CEH) | EC-Council - EC-Council
CompTIA Security+ CE | CompTIA - CompTIA</div><div></div><div>
Travel Required<div>
Less than 10%</div></div><div></div><div>
Citizenship<div>
U.S. Citizenship Required</div></div></div></div></div><div>
Salary and Benefit Information<div>
The likely salary range for this position is $123,250 - $166,750. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range. 
View information about benefits and our total rewards program.</div>
About Our Work<div>
We are GDIT. A global technology and professional services company that delivers technology and mission services to every major agency across the U.S. government, defense and intelligence community. Our 30,000 experts extract the power of technology to create immediate value and deliver solutions at the edge of innovation. We operate across over 50 countries worldwide, offering leading capabilities in digital modernization, AI/ML, cloud, cyber and application development. Together with our customers, we strive to create a safer, smarter world by harnessing the power of deep expertise and advanced technology.</div><div>
Join our Talent Community to stay up to date on our career opportunities and events at gdit.com/tc.</div><div>
Equal Opportunity Employer / Individuals with Disabilities / Protected Veterans</div></div></div>

Cyber Intelligence Specialist - TS/SCI Clearance Required

Phoenix Operations Group

<div>We are looking for a Cyber Hunt Analyst with Data Science experience to apply strong cyber security, Defensive Cyber Operations (DCO), and networking domain knowledge to support cyber analytics product development, threat analysis, statistical analysis, model development, and direct customer mission support. Regular cyber hunt activities consist of hunting for threats, reporting on findings, and converting tools, techniques, and processes into automated capabilities for the current cyber platform. Regular data science activities consist of operational research, statistical analysis, hypothesis testing, model building/testing, and communicating results using visualizations. Will also be responsible for collecting customer Cyber Operations requirements, generating use cases, providing Cyber SME support, and system training to end users.
Essential Job Responsibilities<ul><li>
Conduct threat hunt operations on assigned JCRS-D (Big Data Platforms).</li><li>
Present threat hunt findings through live - interactive remote conference sessions.</li><li>
Perform data analytics across disparate data sets.</li><li>
Assist customer(s) with their threat hunting operations on location as required.</li><li>
Perform quality assurance checks on data that is resident on JCRS-D.</li><li>
Evaluate and analyze new data feeds to determine relevance and usability of data.</li><li>
Support JCRS-D analytic requests (data search, visualizations, dashboards..etc).</li><li>
Provide real time customer support during normal working hours (JCRS-D support chat room).</li><li>
Maintain situational awareness of emerging cyber threats for possible action and notification to an impacted customer(s).</li><li>
Support JCRS-D demonstration requests to showcase various capabilities of the platform.</li><li>
Support JCRS-D training events either in person or virtually.</li><li>
Provide advice on data enrichment and functions to enhance customer experience.</li><li>
Other duties as assigned.</li></ul>
Minimum Qualifications<ul><li>
Security Clearance - A current TS/SCI level U.S. Government clearance with Polygraph is required. U.S. Citizenship required.</li><li>
5+ years experience in cyber security operations related fields with Bachelors in Information Technology, Cyber Security or related field; 3 years relevant experience with Masters in realted field; or High School Diploma or equivalent and 9 years relevant experience.</li><li>
Experience with the DoD customers, ideally supporting US Cyber Command, USMC, DISA or DCDC</li><li>
Proficient in various query languages (SQL, KQL (Kusto))</li><li>
Proficient in Python and bonus for strong experience using Jupyter notebooks</li><li>
Experience with dashboarding/visualizations (Power-BI, Superset)</li><li>
Familiarity with cloud providers and environments (Azure, AWS, Google Cloud Platform)</li><li>
Desire to grow professional and personally</li><li>
Ability to complete technical tasks without supervision</li><li>
Ability to foster and support a collaborative working environment</li><li>
Excellent public speaking, presentation, and customer service skills.</li><li>
Positive and energetic attitude</li><li>
Critical thinking and natural curiosity for all things cybersecurity</li><li>
Cyber Hunt methodologies and techniques</li><li>
SIEMs - (e.g., Splunk, Q-Radar, ELK)</li><li>
SOARs (e.g., Sentinel, CORTEX, X-SOAR)</li><li>
Developing and deploying threat detection signatures</li><li>
Detecting host and network-based intrusions</li><li>
Collecting data from a variety of cyber defense resources. (e.g., CVE, OSINT)</li><li>
Recognizing and categorizing types of vulnerabilities and associated attacks</li><li>
Reading and interpreting signatures (e.g., SNORT, SIGMA, Yara, YAML)</li><li>
Cyber defense and vulnerability assessment tools and their capabilities</li><li>
Network traffic analysis methods (e.g.,TCP-DUMP, Wireshark, Bro/Zeek)</li><li>
Familiar with cyber attack stages (e.g., reconnaissance, scanning, enumeration, gaining access, escalation of privileges, maintaining access, network exploitation, covering tracks), and incident response and handling methodologies. (e.g., MITRE ATT&amp;CK, LM Killchain)</li><li>
Intrusion Detection System (IDS)/Intrusion Prevention System (IPS) tools and applications</li><li>
Must have or ability to obtain within 90 days of hire - Data+, Security+, CySA+, GCIH, GNFA, GCFA or other industry recognized Cybersecurity Certification.</li><li>
Ability to work a hybrid schedule on customer site in Fort Meade, MD on average 3 days a week. Flexibility is essential to adapt to schedule changes as needed.</li></ul>
Preferred Requirements<ul><li>
DoD SOC experience is a plus</li></ul>
Benefits Offered:
Medical, Dental, Vision Insurance - 100% Company Paid Premiums
STD, LTD, and Life Insurance - 100% Company paid
401K &ndash; Automatic 10% company contribution; no matching required
PTO - 4 weeks/year
Holidays - 11 paid/year
Birthdays off with pay
Referral Bonuses &ndash; Upfront AND Annually Recurring
Open Source Bonuses &ndash; Contribute to our Github projects
Professional Development &ndash; Paid training, Certifications, and Enrichment
ABOUT PHOENIX OPERATIONS GROUP:
Phoenix Operations Group is a high-end engineering services company dedicated to protecting and advancing our national cyber resources. As a small company, we rely on innovation to continually advance our employees' skills and provide game-changing solutions to our customers.
Our technical competencies include Big Data analytics (batch and streaming), Cloud Computing infrastructure, multi-INT visualization, and enterprise architectures. We support operational missions (All-Source, Financial, CND) and serve as Product Owners for our open-source research initiatives.
Please visit us at http://www.phoenix-opsgroup.com for more information.
Phoenix Operations Group is an Equal Opportunity Employer. Phoenix Operations Group does not discriminate based on race, religion, color, sex, gender, gender identity, sexual orientation, age, non-disqualifying physical or mental disability, national origin, veteran status, or any other basis covered by appropriate law. All employment is decided based on qualifications, merit, and business needs.</div>

Cyber Hunt Analyst (Hybrid) - TS/SCI Required

Morgan Stanley

<div>We&rsquo;re seeking someone to join our team as a Cyber Threat Intelligence - Technical Analysis and Investigations Lead in Technology to lead technical threat investigations, track sophisticated adversaries, and operationalize technical intelligence for detection and response.
In the Technology division, we leverage innovation to build the connections and capabilities that power our Firm, enabling our clients and colleagues to redefine markets and shape the future of our communities.
This is a Cyber Security Engineering position at VP which is part of the job family responsible for providing specialist cyber expertise and creating solutions that protect the organization's systems and networks against actual and potential security threats and vulnerabilities.
Since 1935, Morgan Stanley is known as a global leader in financial services, continuously evolving and innovating to better serve our clients and our communities in more than 40 countries around the world.
What you'll do in the role:
<ul><li>Lead proactive threat hunts and advanced discovery to identify adversary campaigns, capabilities, infrastructure, and targets using internal collection, OSINT, and vendor intelligence.
 
Research and track advanced threat actors and malware, maintaining deep technical understanding of adversary TTPs and tradecraft.
</li><li>Author high-impact technical threat intelligence products and reports tailored to both operational teams and senior stakeholders.
</li><li>Develop and advance investigative tradecraft, analytic techniques, and automation to improve speed, repeatability, and fidelity of analytic workflows (including Python-based analytics).
 
Enrich, triage, and characterize threat insights and indicators by leveraging open-source and commercial tooling, and curate high-fidelity IOCs for operational use.
</li><li>Partner with threat hunting and security response teams to translate technical intelligence into detection opportunities, mitigations, and control validation activities.
</li><li>Maintain and curate threat profiles aligned to areas of responsibility, producing actionable technical intelligence for proactive detection and discovery. {D Part 2: Scope of Role What you'll bring pre-set content based on tier framework + role-specific bullets
 
 
What you'll bring to the role:
</li><li>Minimum 5 years of experience in cyber threat intelligence, cyber discovery, or cybersecurity investigations, with a track record leading both teams and technical investigations and producing actionable outcomes.
</li><li><div>Expertise in tracking advanced threat actors and malware using frameworks such as MITRE ATT&amp;CK and/or the Diamond Model to characterize campaigns, capabilities, and infrastructure.
 
<ul><li>Proficiency in Python and scripting to automate investigative workflows and develop analytics (e.g., Jupyter notebooks).
</li></ul></div></li><li>Experience with large-scale data analysis and security telemetry tooling to identify patterns, quantify trends, and support analytic judgments.
</li><li>Experience with SIEM platforms and interpreting network/endpoint logs to progress investigations from hypothesis to evidence-based conclusions.
</li><li>Ability to communicate clearly across technical and non-technical audiences, including writing technical reporting and briefing investigative judgments and mitigations.
</li></ul>Nice to have : GIAC GCTI, CISSP, CASP certifications
We are committed to maintaining the first-class service and high standard of excellence that have defined Morgan Stanley for over 89 years. Our values - putting clients first, doing the right thing, leading with exceptional ideas, committing to diversity and inclusion, and giving back - aren&rsquo;t just beliefs, they guide the decisions we make every day to do what's best for our clients,
communities and more than 80,000 employees in 1,200 offices across 42 countries. At Morgan Stanley, you&rsquo;ll find an opportunity to work alongside the best and the brightest, in an environment where you are supported and empowered. Our teams are relentless collaborators and creative thinkers, fueled by their diverse backgrounds and experiences. We are proud to support our employees and their families at every point along their work-life journey, offering some of the most attractive and comprehensive employee benefits and perks in the industry. There&rsquo;s also ample opportunity to move about the business for those who show passion and grit in their work. To learn more about our offices across the globe, please copy and paste
https://www.morganstanley.com/about-us/global-offices into your browser.
WHAT YOU CAN EXPECT FROM MORGAN STANLEY:
At Morgan Stanley, we raise, manage and allocate capital for our clients &ndash; helping them reach their goals. We do it in a way that&rsquo;s differentiated &ndash; and we&rsquo;ve done that for 90 years. Our values - putting clients first, doing the right thing, leading with exceptional ideas, committing to diversity and inclusion, and giving back - aren&rsquo;t just beliefs, they guide the decisions we make every day to do what's best for our clients, communities and more than 80,000 employees in 1,200 offices across 42 countries. At Morgan Stanley, you&rsquo;ll find an opportunity to work alongside the best and the brightest, in an environment where you are supported and empowered. Our teams are relentless collaborators and creative thinkers, fueled by their diverse backgrounds and experiences. We are proud to support our employees and their families at every point along their work-life journey, offering some of the most attractive and comprehensive employee benefits and perks in the industry. There&rsquo;s also ample opportunity to move about the business for those who show passion and grit in their work.
To learn more about our offices across the globe, please copy and paste https://www.morganstanley.com/about-us/global-offices into your browser.
Salary range for the position: 135,000 and 190,000 per year. The successful candidate may be eligible for an annual discretionary incentive compensation award. The successful candidate may be eligible to participate in the relevant business unit&rsquo;s incentive compensation plan, which also may include a discretionary bonus component. Morgan Stanley offers a full spectrum of benefits, including Medical, Prescription Drug, Dental, Vision, Health Savings Account, Dependent Day Care Savings Account, Life Insurance, Disability and Other Insurance Plans, Paid Time Off (including Sick Leave consistent with state and local law, Parental Leave and X Vacation Days annually), 10 Paid Holidays, 401(k), and Short/Long Term Disability, in addition to other special perks reserved for our employees. Please visit mybenefits.morganstanley.com to learn more about our benefit offerings.
Morgan Stanley is an equal opportunity employer committed to building and maintaining a workforce that is diverse in experience and background. Our recruiting efforts reflect our strong commitment to a culture of inclusion, where individuals are hired, developed, and advanced based on their skills and talents.
Our workforce reflects a broad cross-section of the global communities in which we operate, bringing a variety of backgrounds, talents, perspectives, and experiences.
For more information, please visit : https://www.morganstanley.com/people-opportunities/eeo .</div>

Cyber Threat Intelligence - Technical Analysis and Investigations Lead – VP

Leidos

<div>Description
Leidos has a new and exciting opportunity for a Target Analyst Reporter in our Intel Sector's (NSS) Cyber &amp; Analytics Business Area (CABA). Our talented team is at the forefront in Security Engineering, Computer Network Operations (CNO), Mission Software, Analytical Methods and Modeling, Signals Intelligence (SIGINT), and Cryptographic Key Management. At Leidos, we offer competitive benefits, including Paid Time Off, 11 paid Holidays, 401K with a 6% company match and immediate vesting, Flexible Schedules, Discounted Stock Purchase Plans, Technical Upskilling, Education and Training Support, Parental Paid Leave, and much more. Join us and make a difference in National Security!
Job Summary 
Leidos is seeking a Target Analyst Reporter to support SIGINT analysis and reporting within the Cyber &amp; Analytics Business Area. This role focuses on evaluating collection data, producing serialized reports, and synthesizing intelligence from multiple sources with guidance from senior personnel.
Primary Responsibilities<ul><li>
Prioritize, assess, evaluate, and report intelligence from passive and active collection sources</li><li>
Analyze network data and incorporate collateral information to produce finished intelligence products</li><li>
Author and edit serialized SIGINT reports based on collected traffic</li><li>
Identify and extract reportable information using available tools and data sources</li><li>
Conduct research across SIGINT and collateral repositories to enhance reporting</li><li>
Combine data from multiple sources to respond to customer and management requirements</li><li>
Apply basic SIGINT reporting policies while working under mentorship or government guidance</li></ul>
Basic Qualifications<ul><li>
At least 8 years of experience as a Target Analyst supporting the IC or USG military, with at least 2 years within the last 5 years</li><li>
Experience drafting and/or editing finished, serialized SIGINT reports</li><li>
Ability to write reports based on simple or limited traffic</li><li>
Knowledge of technologies or topics used to identify analytic vectors</li><li>
Experience exploiting foreign communications systems to collect, analyze, process, and disseminate SIGINT</li><li>
Experience using software applications and databases related to SIGINT reporting and target development</li><li>
Clearance Requirement: Active TS/SCI with polygraph</li></ul>
conmd
If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo &mdash; because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 &mdash; and moving faster than anyone else dares.<h2 class="jobSectionHeader">
Original Posting:</h2>
April 9, 2026 
For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.<h2 class="jobSectionHeader"> 
Pay Range:</h2>
Pay Range $92,300.00 - $166,850.00
The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.
About Leidos
Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations. Headquartered in Reston, Virginia, with 47,000 global employees, Leidos reported annual revenues of approximately $16.7 billion for the fiscal year ended January 3, 2025. For more information, visit www.Leidos.com.
Pay and Benefits
Pay and benefits are fundamental to any career decision. That's why we craft compensation packages that reflect the importance of the work we do for our customers. Employment benefits include competitive compensation, Health and Wellness programs, Income Protection, Paid Leave and Retirement. More details are available at www.leidos.com/careers/pay-benefits.
Securing Your Data
Beware of fake employment opportunities using Leidos&rsquo; name. Leidos will never ask you to provide payment-related information during any part of the employment application process (i.e., ask you for money), nor will Leidos ever advance money as part of the hiring process (i.e., send you a check or money order before doing any work). Further, Leidos will only communicate with you through emails that are generated by the Leidos.com automated system &ndash; never from free commercial services (e.g., Gmail, Yahoo, Hotmail) or via WhatsApp, Telegram, etc. If you received an email purporting to be from Leidos that asks for payment-related information or any other personal information (e.g., about you or your previous employer), and you are concerned about its legitimacy, please make us aware immediately by emailing us at LeidosCareersFraud@leidos.com.
If you believe you are the victim of a scam, contact your local law enforcement and report the incident to the U.S. Federal Trade Commission.
Commitment to Non-Discrimination
All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws.</div>

Target Analyst Reporter

MITRE

<div>Why choose between doing meaningful work and having a fulfilling life? At MITRE, you can have both. That's because MITRE people are committed to tackling our nation's toughest challenges&mdash;and we're committed to the long-term well-being of our employees. MITRE is different from most technology companies. We are a not-for-profit corporation chartered to work for the public interest, with no commercial conflicts to influence what we do. The R&amp;D centers we operate for the government create lasting impact in fields as diverse as cybersecurity, healthcare, aviation, defense, and enterprise transformation. We're making a difference every day&mdash;working for a safer, healthier, and more secure nation and world. Our workplace reflects our values. We offer competitive benefits, exceptional professional development opportunities for career growth, and a culture of innovation that embraces adaptability, collaboration, technical excellence, and people in partnership. If this sounds like the choice you want to make, then choose MITRE - and make a difference with us.
Job Responsibilities
As a cybersecurity intern, you will collaborate with experienced professionals and apply your knowledge to real-world challenges in cybersecurity and information security. The department works with reverse engineering and cyber capability development in the low-level firmware and embedded systems. Taking systems apart to understand them and utilizing that knowledge to build the capability to inspect, interact, and modify behavior for various outcomes. This hands-on opportunity will allow you to gain experience in one or more of the following areas:<ul><li>
Adversary Emulation</li><li>
Deception and Adversary Engagement</li><li>
Cyber Effects and Reverse Engineering</li><li>
Cyber Forensics</li><li>
Cyber Threat Intelligence</li><li>
Operational Technology Engineering and Response</li><li>
Internet of Things (IoT) and Mobile Device Security</li><li>
Engineering and Architecting Safe, Secure, and Resilient Systems</li><li>
Cyber Policy Development</li><li>
Work in a small lab setting with a task lead to perform research on firmware component for a project which could include reverse engineering with tools such as Ghidra, source code analysis, and/or dynamic instrumentation and generating a prototype in a low-level language such as C.</li><li>
Perform open source research related to the topic area to inform the task and share findings with task and project.</li><li>
Generate an end-of-internship presentation for the project, the department and intern programs on what task we undertaken and the results generated.</li></ul>
Basic Qualifications<ul><li>
Must be a full-time student pursuing an accredited degree program in a Cybersecurity, Information Security, or related disciplines.</li><li>
Must continue to be enrolled the semester following the internship.</li><li>
Foundational knowledge in cybersecurity and/or information security methodologies, frameworks, tools and/or programming languages.</li><li>
Must have sustained excellence in academic performance.</li></ul>
Preferred Qualifications<ul><li>
Experience having applied cybersecurity or information security learning in an internship, research, or lab setting.</li><li>
Demonstrated low-level development experience</li><li>
Experience in reverse engineering</li><li>
Proficiency using cybersecurity and/or information security methodologies, frameworks, tools and/or programming languages.</li><li>
Familiarity with cybersecurity operations and/or the development of cyber policies.</li><li>
Proven ability to work independently.</li><li>
Demonstrated interest in serving the public through previous work experience, volunteer activities, or other relevant engagements.</li></ul>
Clearance: In addition to passing MITRE&rsquo;s employment background check, you may be submitted for a U.S. Government Security clearance. This is determined by the Department of Defense&rsquo;s adjudicative guidelines for receiving a clearance, to include U.S. citizenship. Other jobs may require vetting for various levels of agency public trust, fitness, suitability, controlled access, and special programs access determination consistent with the work program to which you are assigned.
This requisition requires the candidate to have a minimum of the following clearance(s):
None
This requisition requires the hired candidate to have or obtain, within one year from the date of hire, the following clearance(s):
None
Salary compensation range and midpoint:
$46,500 - $58,000 - $69,500 Annual
Work Location Type:
Onsite
It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability. 
 
Commitment to Non-Discrimination
All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, local or international law.
MITRE intends to maintain a website that is fully accessible to all individuals. If you are unable to search or apply for jobs and would like to request a reasonable accommodation for any part of MITRE&rsquo;s employment process, please email recruitinghelp@mitre.org for general support and collegerecruiting@mitre.org for intern positions. This service is for individuals requiring reasonable accommodation requests. Please note that vendor solicitations will not receive a reply.
Benefits information may be found here.
Copyright &copy; 1997-2026, The MITRE Corporation. All rights reserved. MITRE is a registered trademark of The MITRE Corporation. Material on this site may be copied and distributed with permission only.</div>

Reverse Engineering and Cyber Capability Intern

Search 6771+ Cyber intelligence analyst jobs near you this April. New roles added regularly across leading industries. Apply today.