security intelligence analyst

Global Institute for Strategic & Security Studies

Strategic Intelligence AnalystAbout the OpportunityAre you passionate about analyzing global trends, security risks, and strategic developments that shape international decisions?We are seeking a Strategic Intelligence Analyst to join our growing research and advisory team in Doha. This role offers the opportunity to work on high-impact analytical projects involving geopolitical risk, business intelligence, and strategic forecasting.If you enjoy deep research, critical thinking, and turning complex data into actionable insights&mdash;this role is for you.What You&rsquo;ll Do<ul><li>Conduct research on geopolitical, economic, and security-related developments</li><li>Analyze intelligence data to identify trends, risks, and opportunities</li><li>Prepare detailed reports and strategic briefs for internal and client use</li><li>Monitor global news, policy changes, and regional developments</li><li>Support decision-making through data-driven insights and forecasting</li><li>Collaborate with analysts and consultants on strategic advisory projects</li><li>Develop intelligence summaries and presentations for leadership teams</li></ul>What We&rsquo;re Looking For<ul><li>Bachelor&rsquo;s degree in International Relations, Political Science, Security Studies, Economics, or related field</li><li>Strong analytical and critical thinking skills</li><li>Ability to interpret complex data and present clear insights</li><li>Excellent written and verbal communication skills</li><li>Familiarity with geopolitical analysis, risk assessment, or intelligence research</li><li>Proficiency in Microsoft Office (Excel, PowerPoint, Word)</li><li>Ability to work independently and in a team environment</li></ul>Preferred but not required:<ul><li>Experience in intelligence analysis, consulting, research, or policy advisory roles</li><li>Knowledge of Middle East regional dynamics</li></ul>Why Join Us<ul><li>Work on high-impact global research and strategic projects</li><li>Career growth opportunities in intelligence and advisory consulting</li><li>Exposure to international clients and policy-level research</li><li>Collaborative and professional working environment</li><li>Opportunity to build expertise in strategic intelligence and risk analysis</li></ul>How to ApplyIf you are ready to take your career in strategic intelligence to the next level, we encourage you to apply now.Submit your CV and a short cover letter highlighting your analytical experience.Job Type: Full-timePay: QAR12,000.00 - QAR22,000.00 per monthWork Location: In person

Strategic Intelligence Analyst

Red Cedar Consultancy

<div>Job Title: Intelligence Analyst
Location: 6315 Bren Mar Drive, Alexandria, VA 22312
Summary: This program supports a centralized operations center that serves as the primary information and coordination hub for customers nationwide. The center maintains continuous situational awareness of operational activities, incidents, significant events, and natural disasters affecting customer facilities and operations. It integrates information from regional operations, dispatch centers, partner agencies, intelligence units, and proprietary systems to produce consolidated reports, briefings, bulletins, and presentations for senior leadership and stakeholders.
Responsibilities:<ul><li>
The candidate should formulate and apply mathematical modeling and other optimizing methods to develop and interpret information that assists management with decision making, policy formulation, or other managerial functions</li><li>
The candidate should collect and analyze data and develop decision support software, service, or products. The candidate should develop and supply optimal time, cost, or logistics networks for program evaluation, review, or implementation</li><li>
The candidate should Participate in the Open-Source Threat Intelligence Program
<ul><li>The candidate must monitor open sources to identify potential threats to federal facilities</li><li>
Support regional special event open-source information needs</li><li>
Coordinate conveyance of threat information to Procurement Instrument Identifier (PIID) leadership, Surface Warfare Officer (SWO) and appropriate regional leadership in accordance with investigative policies</li><li>
Comply with policies regarding privacy and civil liberties</li><li>
Monitor open sources to identify information meeting Priority Intelligence Requirements (PIRs) and Commander's Critical Information Requirements (CCIRs)</li><li>
Coordinate reporting of PIR and CCIR data to Executive Leadership Team (ELT) in accordance with FPS reporting procedures</li></ul></li><li>
The candidate must prepare the Daily Intelligence Review Bulletin (DIRB)<ul><li>
Daily, access law enforcement (LE) and intelligence systems to review intelligence information and identify relevant topics for the Executive Leadership Team briefing.</li><li>
Draft the Daily Intelligence Review Bulletin (DIRB) for Protective Intelligence and Intelligence Division (PIID) Director review.</li><li>
Brief out the Daily Intelligence Review Bulletin (DIRB) to the Executive Leadership Team in daily briefing</li><li>
Finalize and releases the Daily Intelligence Review Bulletin (DIRB) daily.</li></ul></li><li>
The candidate must support field Requests for Information (RFI) and law enforcement (LE) system checks<ul><li>
Maintain access to the following systems: Law Enforcement Information Management System (LEIMS), Treasury Enforcement Communications System (TECS), Web-based Records Management System (WebRMS), Enforcement Information System (EIS), Threat and Vulnerability Information Sharing System (TAVISS), Homeland Security Information Network (HSIN), Department of Defense Criminal Investigative Information System (DCII), Accurint (LexisNexis Accurint), Homeland Secure Data Network (HSDN), and Joint Worldwide Intelligence Communications System (JWICS).</li><li>
Gather requested information, packages appropriately, and conveys the information to the requestor and appropriate Intelligence Analysis and Intelligence Branch (IAIB) and Intelligence Branch (IB) Desk Officers.</li><li>
Document Requests for Information (RFI) and law enforcement (LE) system checks for the purposes of metrics and performance management.</li></ul></li><li>
The candidate must Contribute to Critical Incident Management<ul><li>
Gather information on critical incidents (as identified by the Senior Watch Officer (SWO) and Executive Leadership Team (ELT)), in coordination with the Senior Watch Officer (SWO), taking the lead on intelligence data gathering.</li><li>
Correlate and coordinate information with reporting from other watch centers, intelligence and law enforcement (LE) systems and databases for incorporation</li><li>
Assist the Senior Watch Officer (SWO) and other personnel in preparing and disseminating critical incident reports to the Executive Leadership Team (ELT) and other senior leaders</li><li>
Ensure compliance with security classification and sensitive information handling requirements.</li></ul></li><li>
The candidate conduct research and data management in support of Protective Intelligence and Intelligence Division (PIID) analytic production and other agency needs<ul><li>
Use systems to gather, analyze, and report data regarding operational activities.</li><li>
Collaborate with Protective Intelligence and Intelligence Division (PIID) Intelligence Analysis and Intelligence Branch (IAIB) and Intelligence Branch (IB) Desk Officers in identifying trends in threats, criminal activities, and operational impacts</li><li>
Generate data, briefings, reports, and products for Federal Protective Service (FPS) Headquarters (HQs) as required</li><li>
Assist in developing and drafting Protective Intelligence and Intelligence Division (PIID) intelligence and information reports, in accordance with the requirements for Intelligence Support Plan (RISP) directive</li></ul></li></ul>
Requirements:<ul><li>
Must possess (TS/SCI) clearance</li><li>
Must have 5 years of experience as Intel Analyst</li><li>
Should have a BA/BS or MA/MS degree</li></ul></div>

Intelligence Analyst

TRM Labs

<div><h2 class="jobSectionHeader">Build a Safer World.</h2>
TRM Labs provides AI-powered intelligence solutions that help public and private sector agencies investigate and disrupt crime. TRM's platforms enable investigators to trace illicit activity, build cases, and construct operating pictures of threat networks. Leading agencies and businesses worldwide rely on TRM to make the world safer and more secure.<h2 class="jobSectionHeader">
Role Overview:</h2>
The threats TRM's analysts work to disrupt aren't abstract &mdash; they fund violence, enable exploitation, and undermine global security. As a Senior Threat Intelligence Analyst, Crypto, you will drive TRM's collection, analysis, and reporting on the actors and networks behind these harms, applying threat intelligence tradecraft to identify, track, and expose adversaries operating in the crypto ecosystem.<h2 class="jobSectionHeader">
The impact you&rsquo;ll have here:</h2><ul><li>
Develop novel collection strategies and analytic methodologies to surface threat actor activity that isn't visible through conventional tooling or open databases</li><li>
Conduct proactive threat hunting across on-chain and off-chain data sources to identify emerging illicit networks before they're widely known</li><li>
Track, analyze, and report on threat actors, campaigns, and illicit networks operating in the crypto ecosystem</li><li>
Identify and assess adversary TTPs, infrastructure, and behavior to support detection and attribution efforts</li><li>
Leverage OSINT and other intelligence methods to uncover hidden threats and generate actionable insights</li><li>
Produce high-quality intelligence that reaches law enforcement and government partners worldwide</li><li>
Collaborate with data, engineering, and product teams to enhance TRM's intelligence capabilities</li><li>
Be a leading voice on the illicit use of crypto and blockchain technologies</li></ul><h2 class="jobSectionHeader">
What we&rsquo;re looking for:</h2><ul><li>
Proven experience in threat intelligence, cyber intelligence, or national security intelligence roles (this is not an entry-level position)</li><li>
Fluency in Russian, Chinese (Mandarin or Cantonese), or Arabic, with the ability to conduct research and analysis in that language, is strongly preferred and may be required in some cases. Please specify your language proficiency and any relevant experience in your application.</li><li>
A track record of generating net-new intelligence &mdash; developing original hypotheses, pursuing non-obvious investigative threads, and surfacing findings that others miss</li><li>
Working knowledge of blockchain and cryptocurrency &mdash; including how transactions work, on-chain tracing concepts, and the role of crypto in financial crime (e.g., ransomware, sanctions evasion, darknet markets)</li><li>
Experience tracking threat actors, cybercrime groups, or nation-state activity &mdash; including analysis of TTPs, infrastructure, and behavioral patterns to support attribution</li><li>
Strong analytical and communication skills with the ability to produce clear, actionable intelligence reports with high intelligence tradecraft standards.</li><li>
Ability to collaborate cross-functionally with technical and non-technical stakeholders</li><li>
Comfort operating in ambiguous, low-signal environments where the analytic path forward has to be constructed, not followed &mdash; and the ownership mindset to drive it independently</li><li>
Hands-on experience with blockchain analysis tools (e.g., Chainalysis Reactor, TRM, Elliptic) or formal cryptocurrency investigation experience</li><li>
Relevant certifications (e.g., GIAC, CEH, Chainalysis Reactor Certification) or background in cybersecurity, intelligence, or investigations</li></ul><h2 class="jobSectionHeader">
About the team:</h2><ul><li>
Our team values open communication and a collaborative work environment, where feedback and ideas are encouraged from all members.</li><li>
We prioritize flexibility and adaptability, ensuring that everyone stays aligned through regular check-ins and progress updates. Operating with a strong focus on shared goals, we work together to meet deadlines while supporting individual growth and innovation.</li><li>
We are a globally distributed team that leans heavily on asynchronous communication. While we aim for ~3&ndash;4 hours of overlap with the Pacific Time Zone, schedules are flexible and may occasionally adjust to support team collaboration.</li></ul><h2 class="jobSectionHeader">
Learn about TRM Speed in this position:</h2><ul><li>
Utilizes sound judgment and the 80/20 principle to drive rapid, high-impact outcomes.</li><li>
Demonstrates the ability to iterate quickly in response to evolving threat landscapes.</li><li>
Leverages creative problem-solving to ensure prompt and effective threat actor engagement to acquire attribution within 24 hours.</li><li>
Employs a diverse set of methodologies to scale and optimize threat intelligence production for customer needs within 72 hours.</li></ul><h3 class="jobSectionHeader"> 
Life at TRM</h3>
We are building a safer world. That promise shows up in how we work every day.
TRM moves quickly. We are a high velocity, high ownership team that expects clarity, follow-through, and impact. People who thrive here are energized by hard problems, experimentation, and continuous feedback. If something takes months elsewhere, it will ship here in days.
Our work sits at the intersection of AI, national security, and fighting crime. The problems are complex, the stakes are real, and the environment evolves quickly. The pace and intensity of the work reflect the importance of the mission. As a result, the way we operate requires a high level of ownership, adaptability, collaboration, and creative problem-solving.
At TRM, you should expect:<ul><li>
Priorities and targets to change quickly as we experiment and iterate</li><li>
Work that often requires operating with a high degree of ambiguity</li><li>
A high level of personal ownership and accountability</li><li>
Close collaboration across teams and functions</li><li>
Frequent, high-touch communication</li><li>
Creative problem solving and out-of-the-box thinking</li><li>
A pace that rewards urgency, adaptability, and outcomes</li></ul>
This environment is energizing for people who enjoy building, solving hard problems, and making progress in situations that are not always fully defined. It also requires comfort navigating ambiguity, adjusting course as new information emerges, and maintaining focus and positivity in a fast-moving and intense environment.
We also recognize that this style of operating is not for everyone. If you are primarily optimizing for predictability or a consistently balanced workload, we encourage you to use the interview process to pressure test whether this environment is truly the right fit. We want teammates who thrive here, not just survive here.
At the same time, many people find this work deeply rewarding. If you are excited by meaningful problems, motivated by ambitious goals, and energized by working alongside mission-driven colleagues, there is a good chance you will find TRM to be an exceptional place to grow and contribute. Learn more: Interviewing at TRM: How We Hire and What Success Looks Like<div> 
</div><h3 class="jobSectionHeader">
AI Fluency at TRM</h3>
AI fluency is a baseline expectation at TRM.
We believe AI meaningfully changes how top performers operate. We expect every team member to use AI to accelerate and reimagine their craft, not just automate surface tasks.
At TRM, AI fluency means you are among the top 10 percent of operators in your function in how you apply AI to:<ul><li>
Accelerate repeatable workflows</li><li>
Structure and solve problems</li><li>
Improve output quality</li><li>
Increase speed and leverage</li></ul>
You will be evaluated on applied AI fluency during the interview process.<h3 class="jobSectionHeader">
Leadership Principles</h3>
We hire and grow against three leadership principles. They&rsquo;re the standards for how we operate, treat each other, and make decisions.<ul><li>
Impact-Oriented Trailblazer: We put customers first and move with speed, focus, and adaptability. We treat every plan like an experiment &ndash; test, ship, measure, and iterate quickly.</li><li>
Master Craftsperson: We care deeply about our craft. We balance speed with high standards, own outcomes end‑to‑end, and invest in getting better everyday.</li><li>
Inspiring Colleague: We add clarity and energy, not noise. We bring humility, candor, and a one‑team mindset &mdash; giving and receiving feedback to make the team stronger.</li></ul><h3 class="jobSectionHeader">
Join our Mission</h3>
At TRM we care deeply about our craft. We are looking for individuals who want their work to matter, who experiment with speed and rigor, and who take pride in building a safer world for billions of people. If you&rsquo;re excited by TRM&rsquo;s mission but don&rsquo;t check every box, we encourage you to apply &mdash; we hire for slope, judgment, and the will to learn fast.
TRM is a Series C company with $220M in total funding, backed by Blockchain Capital, Goldman Sachs, Bessemer, Y Combinator, Thoma Bravo, and others. Headquartered in San Francisco, TRM operates as a distributed-first company with hubs in Los Angeles, San Francisco, New York, Washington D.C., London, and Singapore.<h3 class="jobSectionHeader">
Privacy Policy and Additional Information</h3>
By submitting your application, you are agreeing to allow TRM to process your personal information in accordance with the TRM Privacy Policy.
Our typical hiring cycles for specialized roles span 24 to 36 months. Accordingly, we retain your personal information for up to 36 months to evaluate your application and to consider you for current and future employment opportunities, unless you request earlier deletion or a different retention period is required or permitted by law.
To notify TRM Labs that you believe this job posting is non-compliant, please submit a report through this form. No response will be provided to inquiries unrelated to job posting compliance.
The use of AI tools of any kind (including but not limited to notetakers, interview assistants, and real-time coaching tools such as Otter.ai, Fireflies, Fathom, Cluey, or similar) during TRM interviews is not permitted without prior approval from TRM. TRM uses its own internal tools for note-taking to ensure a consistent and confidential experience for all candidates.
We are committed to providing reasonable accommodations to applicants with disabilities, and requests can be made via this form.<h3 class="jobSectionHeader">
Recruitment agencies</h3>
TRM Labs does not accept unsolicited agency resumes. Please do not forward resumes to TRM employees. TRM Labs is not responsible for any fees related to unsolicited resumes and will not pay fees to any third-party agency or company without a signed agreement.<h3 class="jobSectionHeader">
Learn More: Company Values | Interviewing | FAQs</h3></div>

Senior Threat Intelligence Analyst, Crypto

Alignerr

<div>
 
 Threat Intelligence Analyst (AI Training)
 
 
 
 
 About The Role
 
 
 
 Your threat intelligence skills are in demand &mdash; not just in the SOC, but on the frontier of AI development. At Alignerr, we partner with the world's leading AI research labs to build and train cutting-edge AI models. We're looking for experienced threat intelligence analysts to help shape how AI understands, reasons about, and communicates real-world cyber threats.
 
 
 This is a unique opportunity to apply your hands-on knowledge of adversary behavior, TTPs, and CTI workflows to a problem that matters: making AI smarter and more accurate in the cybersecurity domain.
 
 
 <ul>
 <li>
 Organization: Alignerr
 </li>
 <li>
 Type: Hourly Contract
 </li>
 <li>
 Location: Remote
 </li>
 <li>
 Commitment: 10&ndash;40 hours/week
 
 
 </li>
 </ul>
 
 What You'll Do
 
 
 
 <ul>
 <li>
 Analyze and classify threat reports, adversary campaigns, and attacker behavior for use in AI training datasets
 </li>
 <li>
 Evaluate indicators of compromise, TTPs, and end-to-end attack narratives for accuracy and real-world plausibility
 </li>
 <li>
 Generate, structure, and validate threat intelligence data used to train and benchmark AI systems
 </li>
 <li>
 Review AI-generated cybersecurity outputs and assess them for technical accuracy, realism, and consistency
 </li>
 <li>
 Apply your field knowledge to distinguish authentic attacker behavior from noise, fabrications, or low-quality data
 
 
 </li>
 </ul>
 
 Who You Are
 
 
 
 <ul>
 <li>
 2+ years of experience in threat intelligence, SOC analysis, or security research
 </li>
 <li>
 Familiar with MITRE ATT&amp;CK, OSINT collection methodologies, or CTI workflows
 </li>
 <li>
 Able to critically evaluate threat reports and attack narratives with a trained eye
 </li>
 <li>
 Strong analytical and written communication skills &mdash; you can explain complex threats clearly
 </li>
 <li>
 Self-motivated and comfortable working independently on async, task-based assignments
 
 
 </li>
 </ul>
 
 Nice to Have
 
 
 
 <ul>
 <li>
 Experience writing or editing threat intelligence reports or advisories
 </li>
 <li>
 Familiarity with threat actor tracking, campaign attribution, or malware analysis
 </li>
 <li>
 Background in red team operations, incident response, or digital forensics
 </li>
 <li>
 Prior exposure to AI or machine learning workflows
 
 
 </li>
 </ul>
 
 Why Join Us
 
 
 
 <ul>
 <li>
 Work directly on frontier AI systems alongside top research labs
 </li>
 <li>
 Fully remote and flexible &mdash; work on your own schedule, on your own terms
 </li>
 <li>
 Freelance autonomy with meaningful, intellectually engaging work
 </li>
 <li>
 Apply deep domain expertise in a high-impact, emerging field
 </li>
 <li>
 Potential for ongoing work and contract extension as projects grow
 </li>
 </ul>
</div>

Threat Intelligence Analyst

Endsight

<div>
 
 
 Application Deadline:
 
 13 May 2026
 
 
 
 Department:
 
 Security
 
 
 
 Location:
 
 Napa
 
 
 
 Compensation:
 
 $33.65 - $40.85 / hour
 
 
 
 
 Description
 
 
 
 
 Location:
 
 Remote position
 
 
 Shift:
 
 8:00am PST- 5:00pm PST , On-Call Share required
 
 
 
 You&rsquo;re the kind of person who helps others succeed.
 
 
 
 You&rsquo;re sharp, resourceful, and calm under pressure&mdash;the one people count on when technology misbehaves. You love solving problems, restoring order, and creating moments where others can breathe again because you&rsquo;ve got it handled.
 
 
 But lately, you might be craving a team that matches your standards&mdash;where doing great work and helping others thrive go hand in hand.
 
 
 
 That&rsquo;s where Endsight comes in.
 
 
 
 
 Who We Are
 
 
 Endsight is a fast-growing IT Managed Service Provider built on one core belief:
 
 When we help others thrive, we thrive too.
 
 We partner with small and mid-sized organizations&mdash;including nonprofits&mdash;to ensure their technology performs flawlessly so they can focus on what they do best.
 
 We&rsquo;re a team that learns fast, leans in, and looks out for one another. Life here feels like being part of a great university&mdash;you&rsquo;ll grow quickly, connect deeply, and do work that truly matters.
 
 
 
 Purpose--What You'll Do
 
 
 
 Endsight&rsquo;s security analyst will serve as the primary technical support resource and coordinator between MSP clients, Endsight employees, and MSSP clients for security products. The analyst will support our organization with deployment, support, consulting, evaluation, and other security duties in support of Endsight and the security department.
 
 
 
 Who Thrives Here
 
 
 You&rsquo;ll fit right in if you:
 <ul>
 <li>
 Take pride in helping others succeed
 </li>
 <li>
 Love mastering your tools and improving your craft
 </li>
 <li>
 Communicate clearly and stay composed under pressure
 </li>
 <li>
 Are energized by teamwork and mutual respect
 </li>
 <li>
 Want to grow in a place where your success helps everyone win
 
 
 </li>
 </ul>
 
 Qualifications
 
 
 
 
 Required:
 
 <ul>
 <li>
 This position is a Monday-Friday 8:00AM-5:00PM position in the US Pacific Time Zone.
 </li>
 <li>
 Bachelor's degree and 2 years of experience or 4 years of IT experience in lieu of a degree
 </li>
 <li>
 Minimum 2 years&rsquo; experience with security technologies (EDR/MDR, DNS Protection, Phishing tools)
 </li>
 <li>
 Strong knowledge of security principles, standards, and best practices.
 </li>
 <li>
 Excellent communication, collaboration, and problem-solving skills.
 </li>
 <li>
 Ability to work independently and as part of a team.
 </li>
 <li>
 Ability to work remotely and manage time effectively.
 <ul>
 <li>
 Also includes the ability to manage demands from multiple departments at Endsight as well as clients. Although leadership will assist with prioritization, this position is constantly contacted for security related requests.
 </li>
 </ul>
 </li>
 <li>
 Excellent attention to detail
 </li>
 <li>
 US Citizenship
 
 
 </li>
 </ul>
 
 Preferred:
 
 <ul>
 <li>
 Passion and curiosity for the security profession; a genuine desire to learn and improve the security of Endsight and our clients.
 </li>
 <li>
 Exceptional technical writing skills
 </li>
 <li>
 Ability to visualize data in the most effective way possible for a given project or study
 </li>
 <li>
 Analytical and problem-solving skills
 </li>
 <li>
 Ability to work with team members from different backgrounds.
 </li>
 <li>
 Experience with Ninja One RMM.
 </li>
 </ul>
 Join a Team That&rsquo;s All-In on Helping You ThriveIf you&rsquo;re ready to perform at a high level, learn like crazy, and make a real impact for the people you serve&mdash;Endsight is where you belong.
 
 
 Apply today and let&rsquo;s build something excellent together.
 
 
 
 
 Benefits...What You&rsquo;ll Get
 
 
 
 <ul>
 <li>
 Medical: Company pays 100% of the base plan for the employee and family
 </li>
 <li>
 Dental &amp; Vision
 </li>
 <li>
 401(k) with employer matching
 </li>
 <li>
 Accrued Paid Time Off
 </li>
 <li>
 9 Paid Holidays
 </li>
 <li>
 Career Pathing
 
 
 </li>
 </ul>
</div>

Security Analyst 1

The Home Depot

<div><div>Position Purpose:<div>
The Cybersecurity Security Analyst is responsible for protecting the organization&rsquo;s information assets by identifying, assessing, and helping remediate security risks across business portfolios. This role requires a strong cybersecurity mindset, solid risk management skills, and the ability to build relationships with business and technology stakeholders to drive security initiatives. The ideal candidate is customer-focused, detail-oriented, and highly skilled in Excel and documentation to support data-driven decision making and clear communication.</div><div></div>
Key Responsibilities:<ul><li><div><ul><li>
Manage identified cybersecurity risks through established risk management tools and processes spanning applications, infrastructure, and business operations.</li></ul></div><div><ul><li>
Collaborate with product, engineering, and business teams to advance security initiatives and integrate security requirements into proposed solutions.</li></ul></div><div><ul><li>
Prepare and deliver the weekly report on security vulnerabilities and identified risks to the business and stakeholders, ensuring timely remediation efforts.</li></ul></div><div><ul><li>
Monitor, analyze, and report on key security metrics, issues, and remediation activities utilizing Excel and other relevant reporting platforms.</li></ul></div><div><ul><li>
Support the organization&rsquo;s migration to &quot;Secure Flow&quot; (paved path) in partnership with Cybersecurity, IT Developers, and business stakeholders.</li></ul></div><div><ul><li>
Promote awareness of security policies, standards, procedures, and playbooks among business partners to ensure comprehensive adherence from project initiation.</li></ul></div><div><ul><li>
Investigate findings and exceptions, coordinating resolution efforts with Cybersecurity, IT Developers, and business stakeholders.</li></ul></div><div><ul><li>
Assist with third-party/vendor security assessments and risk reviews as required.</li></ul></div><div><ul><li>
Provide customer-focused assistance to internal partners by clearly communicating security requirements, associated risks, and recommended actions in an accessible and business-oriented manner.</li></ul></div>
30% Analysis - Perform data gathering, synthesis, and develop solutions; Leverage department standards to achieve results</li><li>
30% Collaborate - Partner with teams to identify trends and resolve problems</li><li>
40% Drive Execution - Evaluate information and provide recommendations based on findings</li></ul> 
Direct Manager/Direct Reports:<ul><li>
This Position typically reports to Manager or Sr. Manager</li><li>
This Position has 0 Direct Reports</li></ul> 
Travel Requirements:<ul><li>
Typically requires overnight travel less than 10% of the time.</li></ul> 
Physical Requirements:<ul><li>
Most of the time is spent sitting in a comfortable position and there is frequent opportunity to move about. On rare occasions there may be a need to move or lift light articles.</li></ul> 
Working Conditions:<ul><li>
Located in a comfortable indoor area. Any unpleasant conditions would be infrequent and not objectionable.</li></ul> 
Minimum Qualifications:<ul><li>
Must be eighteen years of age or older.</li><li>
Must be legally permitted to work in the United States.</li></ul> 
Preferred Qualifications:<ul><li><div><div><ul><li>
2+ years of hands-on experience in cybersecurity, information security, or a closely related field.</li></ul></div><div><ul><li>
Demonstrated cybersecurity mindset with a strong understanding of core security principles (confidentiality, integrity, availability, least privilege, defense-in-depth, etc.).</li></ul></div></div><div><div><ul><li>
Experience with risk management practices, including identifying, assessing, and helping to prioritize and remediate security risks.</li></ul></div><div><ul><li>
Proven ability to build and maintain strong relationships with cross-functional stakeholders (business, product, engineering, operations).</li></ul></div><div><ul><li>
Strong customer focus mindset, with the ability to balance security needs with business objectives.</li></ul></div><div><ul><li>
Advanced proficiency in Microsoft Excel (e.g., pivot tables, lookups, charts, basic formulas) for analysis and reporting.</li></ul></div><div><ul><li>
Excellent documentation skills, including writing clear security reports, procedures, and stakeholder communications.</li></ul></div><div><ul><li>
Strong analytical, problem-solving, and organizational skills.</li></ul></div><div><ul><li>
Effective verbal and written communication skills, with the ability to explain technical issues to non-technical audiences.</li></ul></div><div><ul><li> 
CompTIA Security+ certification or equivalent industry-recognized security certification.</li></ul></div><div><ul><li>
Experience working in or with large enterprise environments and complex business portfolios.</li></ul></div></div>
No additional qualifications</li></ul> 
Minimum Education:<ul><li>
The knowledge, skills and abilities typically acquired through the completion of a bachelor's degree program or equivalent degree in a field of study related to the job.</li></ul> 
Preferred Education:<ul><li>
Bachelor&rsquo;s degree in Cybersecurity, Information Security, Computer Science, Information Technology, or related field; or equivalent work experience.</li></ul> 
Minimum Years of Work Experience:<ul><li>
0</li></ul> 
Preferred Years of Work Experience:<ul><li>
No additional years of experience</li></ul> 
Minimum Leadership Experience:<ul><li>
None</li></ul> 
Preferred Leadership Experience:<ul><li>
None</li></ul> 
Certifications:<ul><li>
None</li></ul> 
Competencies:<ul><li>
Action Oriented</li><li>
Collaborates</li><li>
Communicates Effectively</li><li>
Customer Focus</li><li>
Drives Results</li></ul></div> 
Apply End Date: 05/12/2026</div>

Cybersecurity Analyst - SSE

cFocus Software Incorporated

<div><h1 class="jobSectionHeader">Cyber Threat Intelligence Analyst Job Description</h1>
Position: Cyber Threat Intelligence Analyst 
Program: SBA Enterprise Cybersecurity Services (ECS)<h2 class="jobSectionHeader">
Position Summary</h2>
The Cyber Threat Intelligence Analyst supports the Small Business Administration (SBA) Enterprise Cybersecurity Services (ECS) program by delivering advanced cyber threat intelligence, threat analysis, proactive threat hunting, and operational cybersecurity support services. 
The Cyber Threat Intelligence Analyst is responsible for collecting, analyzing, correlating, and disseminating actionable cyber threat intelligence to support the SBA Security Operations Center (SOC), cybersecurity operations, incident response activities, and enterprise risk mitigation efforts. The position supports 24x7x365 cybersecurity operations through advanced analysis of indicators of compromise (IOCs), adversary tactics, techniques, and procedures (TTPs), emerging vulnerabilities, and threat actor activity impacting federal information systems and cloud environments.<h2 class="jobSectionHeader">
Essential Duties and Responsibilities</h2><ul><li>
Provide cyber threat intelligence and operational analysis support for the SBA SOC in support of Task Area 3.5.3 Cybersecurity Operations Support.</li><li>
Conduct proactive cyber threat hunting activities across enterprise systems, cloud environments, endpoints, and network infrastructure.</li><li>
Analyze indicators of compromise (IOCs), threat actor tactics, techniques, and procedures (TTPs), malware behaviors, and emerging cyber threats.</li><li>
Monitor and evaluate cyber threat intelligence feeds, vendor reporting, CISA advisories, US-CERT alerts, and external intelligence sources.</li><li>
Perform advanced correlation and analysis of security events, SIEM data, IDS/IPS alerts, EDR telemetry, DNS logs, firewall logs, and network traffic.</li><li>
Support incident response and cybersecurity investigations through intelligence-driven analysis and threat attribution support.</li><li>
Develop cyber threat intelligence reports, operational briefings, situational awareness products, and executive-level summaries.</li><li>
Assist with the identification of previously unknown attack vectors and suspicious activity through threat hunting and anomaly analysis.</li><li>
Support digital forensics and incident analysis activities in coordination with SOC analysts, engineers, and incident responders.</li><li>
Develop and maintain threat intelligence playbooks, threat models, attack scenarios, and adversary profiles.</li><li>
Perform analysis of cloud security events and cyber threats impacting Microsoft 365, Azure, AWS, Salesforce, and hybrid cloud environments.</li><li>
Conduct research on advanced persistent threats (APTs), ransomware groups, insider threats, nation-state actors, and emerging cyber attack trends.</li><li>
Provide recommendations for defensive countermeasures, detection logic improvements, and enhanced security monitoring capabilities.</li><li>
Assist in the development of threat signatures, SIEM use cases, detection analytics, and threat detection content.</li><li>
Support continuous improvement of cybersecurity operations, threat intelligence workflows, and incident response processes.</li><li>
Coordinate with federal stakeholders, law enforcement, privacy officials, insider threat teams, and mission partners during cyber incident activities.</li><li>
Document investigative findings, intelligence assessments, and operational actions within case management and reporting systems.</li><li>
Participate in SOC operational meetings, shift briefings, incident coordination calls, and cybersecurity readiness activities.</li><li>
Maintain awareness of evolving cybersecurity technologies, federal threat reporting requirements, and NIST cybersecurity guidance.</li><li>
Support cybersecurity communications, intelligence sharing, and collaboration activities across the SBA enterprise.</li></ul><h2 class="jobSectionHeader">
Minimum Qualifications</h2><ul><li>
Bachelor&rsquo;s degree in Cybersecurity, Computer Science, Information Technology, Intelligence Studies, Information Assurance, or related discipline. Relevant experience may substitute for degree requirements.</li><li>
Minimum of 5 years of experience supporting cybersecurity operations, cyber threat intelligence, threat hunting, incident response, or SOC operations.</li><li>
Experience analyzing threat intelligence, indicators of compromise, adversary TTPs, and cybersecurity attack methodologies.</li><li>
Hands-on experience with SIEM, EDR, IDS/IPS, network analysis, and cyber defense tools.</li><li>
Experience conducting threat hunting and advanced event correlation across enterprise environments.</li><li>
Knowledge of federal cybersecurity frameworks and guidance including NIST SP 800-61, NIST SP 800-53, and CISA operational guidance.</li><li>
Understanding of MITRE ATT&amp;CK framework and cyber kill chain methodologies.</li><li>
Experience with cloud security monitoring and threat analysis in Microsoft Azure, AWS, Microsoft 365, and hybrid environments.</li><li>
Strong analytical, investigative, communication, and reporting skills.</li><li>
Ability to support 24x7x365 cybersecurity operational environments.</li></ul><h2 class="jobSectionHeader">
Preferred Certifications</h2><ul><li>
GIAC Cyber Threat Intelligence (GCTI)</li><li>
GIAC Certified Incident Handler (GCIH)</li><li>
GIAC Certified Forensic Analyst (GCFA)</li><li>
Certified Information Systems Security Professional (CISSP)</li><li>
CompTIA CySA+</li><li>
Certified Ethical Hacker (CEH)</li><li>
Splunk Enterprise Security Certified Admin</li><li>
Microsoft Security Operations Analyst Associate (SC-200)</li></ul>
Pw75tUj9Bf</div>

SBA - Cyber Threat Intelligence Analyst

Search 10000+ Security intelligence analyst jobs near you this May. New roles added regularly across leading industries. Apply today.