Cyber Threat Intelligence CTI Analyst - Level 1

Job Description

Everforth ECS is seeking a Cyber Threat Intelligence (CTI) Analyst - Level 1 to join an enterprise-scale cybersecurity program supporting a major federal civilian agency. This position supports remote work, with preference given to candidates residing in or near the National Capital Region (NCR).

In this role, you will support cyber threat intelligence collection, analysis, and reporting activities that help identify emerging threats and strengthen enterprise cybersecurity defenses. You will work alongside experienced intelligence analysts, SOC personnel, threat hunters, and cybersecurity professionals to research threat activity, analyze indicators of compromise, and provide actionable intelligence that supports detection and response operations. Your contributions will improve threat awareness, strengthen defensive readiness, and support the protection of mission-critical federal systems and sensitive information.

Please Note: This position is contingent upon contract award.

Salary Range: $80,000 - $100,000

Position Responsibilities

• Collect, review, and organize cyber threat intelligence from government, commercial, open-source, and internal security information sources.
• Monitor emerging threats, vulnerabilities, adversary campaigns, and cybersecurity advisories to identify information relevant to enterprise security operations.
• Conduct initial analysis and enrichment of indicators of compromise (IOCs), including suspicious IP addresses, domains, file hashes, and other threat artifacts.
• Support the identification and documentation of adversary tactics, techniques, and procedures (TTPs) using established frameworks such as MITRE ATT&CK.
• Assist with correlating threat intelligence against security alerts, vulnerability information, and enterprise assets to identify potentially relevant threats.
• Prepare threat intelligence summaries, alerts, reports, and other products that communicate findings to cybersecurity teams and stakeholders.
• Maintain threat intelligence records, indicator repositories, and supporting documentation to ensure information accuracy, traceability, and accessibility.
• Collaborate with SOC analysts, threat hunters, and incident response personnel to provide relevant threat intelligence and supporting investigative context.
• Follow established intelligence analysis procedures, source evaluation practices, information handling requirements, and reporting standards.
• Participate in intelligence reviews, knowledge-sharing activities, and continuous improvement efforts to strengthen intelligence quality and operational relevance.

Required Skills

• U.S. Citizenship required.
• Remote position, with preference for candidates residing within close proximity to the National Capital Region (NCR).
• Active Public Trust 6C determination, or the ability to obtain and maintain the required determination.
• High school diploma with 8 years of experience, Bachelor's degree with 2 years of experience, or Masters degree preferably in Cybersecurity, Information Technology, Intelligence Studies, Computer Science, or a related field.
• Foundational understanding of cybersecurity threats, vulnerabilities, attack techniques, and common indicators of compromise.
• Familiarity with cyber threat intelligence concepts, intelligence collection, open-source research, and basic analytical methodologies.
• Basic understanding of enterprise networks, operating systems, security technologies, and common cyberattack methods.
• Strong research, analytical, organizational, and documentation skills, with attention to information accuracy and detail.
• Effective written and verbal communication skills, with the ability to follow established procedures and collaborate with cybersecurity professionals.

Desired Skills

• Experience supporting cybersecurity operations, intelligence analysis, or threat monitoring within federal civilian agencies or enterprise environments.
• Familiarity with threat intelligence platforms, SIEM technologies, and open-source intelligence (OSINT) tools.
• Knowledge of MITRE ATT&CK, the Cyber Kill Chain, and common cyber threat intelligence frameworks.
• Familiarity with threat intelligence sources such as CISA advisories, NIST vulnerability information, and commercial intelligence feeds.
• Experience researching indicators of compromise, identifying threat patterns, or preparing intelligence summaries.
• Familiarity with basic scripting, data analysis, or security query languages such as Python, SQL, or SPL.

ECS Federal LLC is an equal opportunity employer and does not discriminate or allow discrimination on the basis any characteristic protected by law. All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, or local jurisdiction law.

Everforth ECS is the federal segment of Everforth, a $4B global organization with over 10,000 employees. Our nearly 3,500 professionals deliver advanced technology solutions in data and AI, cybersecurity, and enterprise transformation, serving defense, intelligence, and federal civilian agencies.

Our work powers mission-critical outcomes, strengthens technology partnerships, and creates meaningful opportunities for our people. We are defined by a commitment to excellence in delivery, a culture of innovation, and an environment where talent can thrive and grow.

We value:

• Attracting and developing top talent and high-performing teams
• Fostering a culture that is engaging, accountable, and mission-driven

Meet the challenge. Make a difference with Everforth ECS!