3,925 Threat Intelligence jobs in the United States

About the job Threat Intelligence Analyst
Top Secret Clearance Jobs is dedicated to helping those with the most exclusive security clearance find their next career opportunity and get interviews within 48 hours.

Position: Intelligence Operations

Location: Arlington, VA - Hybrid 3 days per week

Compensation: 150K plus 15% bonus and full benefits (100% paid by employer)

Position Summary:

The job of a Cyber/All Source Intelligence Analyst is to work with the Intel Team to evaluate and warn about cyber and other threats and vulnerabilities to critical assets in the financial services sector. As a part of this job, the analyst will collaborate with U.S. Government partners to drive and inform a robust intelligence cycle on threats and vulnerabilities. The analyst will also develop new sources of information on cyber and other threat issues relevant to the sector and deliver threat research on the other non-cyber challenges facing the sector. The analyst will contribute to and produce a range of strategic and tactical warning products and participate in briefings to members and government partners. Overall, the job requires strong analytical and technical skills to identify, analyze and communicate potential threats to the client's assets.

Responsibilities

• Provide strategic and tactical warning on cyber and other threats and vulnerabilities relevant to internal stakeholders and to the systemically relevant critical infrastructure identified in the firm's Risk Register.
• Maintain and develop strong relationships with the firm members' intelligence teams and US Government partners to enable effective and timely collaboration on cyber and non-cyber threats to the sector and emerging vulnerabilities.
• Work with firm members and government partners to develop a unified data acquisition, analysis, and early warning capability on critical cyber and non-cyber threats and vulnerabilities.
• In terms of cyber threats, engage in technical discussions with government and private sector cyber experts using the MITRE ATT&CK Framework, Cyber Kill Chain, Diamond Model of Intrusion Analysis, and other relevant cyber network defense and intelligence frameworks.
• Convey the results of the technical discussions in written products and briefings in forms that are relevant to firm member intelligence teams and senior leaders in member clients.

• Strong collaborative skills and proven ability to work in a diverse team of security professionals.
• Strong analytical, verbal, and written skills with a demonstrated track record of delivering all-source intelligence products in a manner consistent with Intelligence Community standards.
• Self-starter who thrives in a fast-paced, ambiguous environment, adept at anticipating client needs, effectively multitasking, and managing priorities.
• Ability to work independently as well as collaborate as part of a team.

• Excellent judgement and problem-solving skills, showing the utmost discretion in the management of confidential corporate information.
• Knowledge of the principal organizations, methods, procedures, and techniques of gathering and disseminating intelligence reporting and producing and sharing intelligence analysis.

• Bachelor's degree or higher in Engineering, Intelligence Studies, Cyber Security, Computer Science, International Affairs, or related field or relevant work experience.
• A current TS-SCI background investigation.

• Experience collecting, analyzing, and interpreting data from multiple sources.
• 5+ years of experience conducting all-source analysis in the Intelligence Community.
• Experience with threat intelligence tools and management platforms.
• Knowledge of the MITRE ATT&CK Framework, Cyber Kill Chain, Diamond Model of Intrusion Analysis, and/or other relevant network defense and intelligence frameworks

• Monitor and analyze threat intelligence feeds, indicators of compromise (IOCs), and emerging cyber threats.
• Provide timely, actionable intelligence reports to stakeholders across security operations, incident response, and executive leadership.
• Conduct in-depth research into cyber threat actors, tactics, techniques, and procedures (TTPs).
• Correlate threat data with internal security events to support detection and mitigation efforts.
• Collaborate with SOC analysts, incident response teams, and other departments to share findings and improve threat visibility.
• Develop and maintain threat intelligence databases, dashboards, and knowledge bases.
• Contribute to the development of detection rules and playbooks based on intelligence findings.
• Participate in threat hunting activities and red/blue team exercises.
• Stay current with the global cybersecurity landscape, vulnerabilities, and security best practices.

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related field (or equivalent experience).
• 2+ years of experience in cybersecurity, with at least 1 year in threat intelligence or a related field.
• Familiarity with threat intelligence platforms (TIPs), SIEM tools (e.g., Splunk, QRadar), and MITRE ATT&CK framework.
• Strong analytical, research, and communication skills.
• Understanding of malware analysis, phishing, and social engineering tactics.
• Knowledge of IP networking, endpoint security, and common cybersecurity tools.

• Monitor and analyze threat intelligence feeds, indicators of compromise (IOCs), and emerging cyber threats.
• Provide timely, actionable intelligence reports to stakeholders across security operations, incident response, and executive leadership.
• Conduct in-depth research into cyber threat actors, tactics, techniques, and procedures (TTPs).
• Correlate threat data with internal security events to support detection and mitigation efforts.
• Collaborate with SOC analysts, incident response teams, and other departments to share findings and improve threat visibility.
• Develop and maintain threat intelligence databases, dashboards, and knowledge bases.
• Contribute to the development of detection rules and playbooks based on intelligence findings.
• Participate in threat hunting activities and red/blue team exercises.
• Stay current with the global cybersecurity landscape, vulnerabilities, and security best practices.

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related field (or equivalent experience).
• 2+ years of experience in cybersecurity, with at least 1 year in threat intelligence or a related field.
• Familiarity with threat intelligence platforms (TIPs), SIEM tools (e.g., Splunk, QRadar), and MITRE ATT&CK framework.
• Strong analytical, research, and communication skills.
• Understanding of malware analysis, phishing, and social engineering tactics.
• Knowledge of IP networking, endpoint security, and common cybersecurity tools.

Greystones Group is a fast-growing woman-owned small business supporting our Nation’s Defense and Critical Infrastructure Agencies with best-in-class artificial intelligence and big data analytics capabilities. Our capabilities include mission planning, operational support, leader development and education, cybersecurity, electronic warfare, and information technology solutions. We are looking for dedicated and motivated candidates that can grow with the company. At Greystones, we recognize that everyone brings their own important skill sets and unique talents to create a highly competent team to deliver quality solutions. We ensure that each member’s needs are addressed effectively, and our employees are not just a number. We offer a close-knit community that ensures your growth and development in a setting that provides world-class support to our customers. Greystones is seeking Threat Intelligence Analyst to support the Internal Revenue Service (IRS), developing data analytic, cybersecurity, and IT capabilities. The Threat Intelligence Analyst will be responsible for analyzing potential security threats to the IRS’s information systems and infrastructure. Working with minimal supervision, the analyst will conduct in-depth research, gather intelligence, and provide actionable insights to mitigate and respond to emerging cybersecurity threats. This role requires the ability to analyze complex data and contribute to the development of threat mitigation strategies. Major Duties/Responsibilities: Conducting detailed analysis of cybersecurity threats and vulnerabilities targeting the IRS. Collaborating with senior analysts, engineers, and program managers to understand emerging threats and assist in threat intelligence gathering and reporting. Monitoring and analyzing various threat intelligence sources, including open-source, government and private-sector feeds. Identifying and assessing risks associated with cyber threats and vulnerabilities within the IRS system. Contributing to the development of reports, briefings, and recommendations to senior leadership and relevant stakeholders regarding threat intelligence findings. Assist in the implementation of threat detection and response strategies to protect IRS systems and data. Documenting and sharing threat intelligence findings and maintaining accurate records of analysis and response actions. Benefits: 401(k) 401(k) matching Dental insurance Flexible schedule Flexible spending account Health insurance Life insurance Paid time off Referral program Retirement plan Vision insurance Requirements: Bachelor’s Degree in Cybersecurity, Information Technology, or a related field and a minimum of 5 years of experience. 4+ years of experience in threat intelligence analysis, cybersecurity or a related field. Experience supporting government or DoD projects. Demonstrated experience analyzing cybersecurity threats and providing actionable intelligence to inform security decision-making. Strong analytical skills and ability to assess and interpret complex data related to cybersecurity threats. Familiarity with threat intelligence tools, platforms, and frameworks. Excellent communication skills, with the ability to present technical findings in a clear and concise manner to non-technical stakeholders. Familiarity with IRS systems and data security requirements is a plus. Knowledge of industry-standard cybersecurity certifications is a plus. Greystones Group is an Equal Opportunity Employer and abides by the requirements of 41 CFR §§ 60-1.4(a), 60-300.5(a), and 60-741.5(a). These regulations prohibit discrimination against qualified individuals based on their status as protected veterans or individuals with disabilities and prohibit discrimination against all individuals based on their race, color, religion, sex, national origin, genetic information, gender identity, or sexual orientation. If you are a qualified individual with a disability or a disabled veteran, you have the right to request a reasonable accommodation if you are unable or limited in your ability to use or access Greystones career website due to your disability. You may request reasonable accommodations by contacting our Human Resources Department at202-644-8998 option #2 or you need assistance completing any forms or otherwise participate in the application process. This organization participates in E-verify. #J-18808-Ljbffr