Cti Analyst Jobs (NOW HIRING)

Location: Washington, DC, Ft. Collins, CO, or Kansas City, MO (remote optional, local preferred)

Terms: Full-time

Clearance: Active Top Secret/SCI required

Salary Range: $90-130k DOE

Travel: 0-10%

This position supports a large-scale federal security operations program responsible for continuous monitoring, threat detection, incident response, and cyber threat intelligence across a complex enterprise network environment. The intelligence function is the program's early warning system — producing finished products that shape both immediate operational response and long-range strategic awareness.

The core challenge: delivering timely, accurate, actionable cyber threat intelligence to security operations and program leadership — at both classified and unclassified levels — while maintaining coordination with interagency partners and supporting the Cyber Hunt Team with targeted CTI analysis.

As a Cyber Intelligence Analyst at Revolutional, you are the program's cyber threat intelligence practitioner — producing periodic and ad hoc intelligence products, delivering early indications and warnings, and ensuring the security operations team has the threat context they need to detect and respond effectively. You apply structured intelligence tradecraft to cyber threat analysis and produce finished products that reach both technical operators and executive leadership

You coordinate with interagency and organizational security partners, support the Cyber Hunt Team with targeted CTI analysis, and provide mobile security guidance for personnel traveling internationally. You are a disciplined intelligence professional who brings operational rigor and analytical credibility to a fast-paced security operations environment.

• Cyber threat-focused intelligence analysis and finished product production
• Periodic and ad hoc intelligence reports and briefings for technical and executive audiences
• Early indications and warnings tradecraft and delivery
• Interagency and organizational security coordination on cyber threat matters
• Cyber policy and procedure review from an intelligence perspective
• CTI analysis support to the Cyber Hunt Team
• Mobile security advisory support for international travel

• Conduct cyber threat-focused intelligence analysis across classified and unclassified sources; apply structured analytic tradecraft to produce accurate, timely, and actionable finished intelligence products
• Produce periodic and ad hoc intelligence reports and briefings tailored to both technical security operations teams and senior program leadership
• Deliver early indications and warnings (I&W) of emerging cyber threats, adversary activity, and shifting threat actor TTPs that may affect the enterprise environment
• Coordinate with interagency partners and organizational security offices on cyber threat matters; share finished products and receive external intelligence to inform program analysis
• Review and assess cyber policy and procedures from an intelligence perspective; identify gaps or misalignments between policy posture and current threat reality
• Support the Cyber Hunt Team with targeted CTI analysis: develop threat actor profiles, map TTPs to hunt hypotheses, and provide intelligence context for active investigations
• Provide mobile security advisory support for personnel traveling internationally; assess threat environments and brief travelers on relevant security risks and protocols
• Maintain awareness of current adversary campaigns, threat actor tradecraft, geopolitical developments, and emerging vectors relevant to the federal enterprise
• Contribute to intelligence community information sharing in accordance with applicable classification and handling requirements
• Develop and maintain intelligence products, threat actor tracking databases, and analytic archives that support long-range strategic threat assessment

• Bachelor's degree in Intelligence Studies, Political Science, Computer Science, Information Security, or related field (or equivalent experience)
• 5 or more years of intelligence-related experience, with a focus on cyber threat analysis and finished intelligence production
• Demonstrated experience with intelligence briefing delivery, threat analysis, intelligence product authorship, and Early Indications & Warnings tradecraft
• Active Top Secret/SCI clearance required

• Proficiency producing finished intelligence products: threat assessments, intelligence summaries, I&W products, and ad hoc analytic reports at both classified and unclassified levels
• Experience delivering intelligence briefings to technical teams and senior leadership audiences with clarity and analytical credibility
• Hands-on experience applying Early Indications & Warnings tradecraft in a cyber threat context
• Working knowledge of cyber threat actor TTPs, adversary campaign tracking, and the current federal threat landscape
• Experience supporting hunt or incident response teams with targeted CTI analysis and threat context
• Familiarity with MITRE ATT&CK and D3FEND frameworks applied to intelligence analysis and threat actor profiling
• Experience coordinating with interagency partners or organizational security offices on cyber threat information sharing
• Understanding of mobile security threats and the ability to assess and communicate risk for international travel scenarios
• Familiarity with cyber policy and procedure review from an intelligence or risk perspective

• Analytically rigorous: you apply structured tradecraft consistently and produce finished intelligence that holds up under peer review and leadership scrutiny
• Clear, audience-aware communicator — your written products and verbal briefings are calibrated for who's receiving them, from SOC analysts to executives
• Effective interagency partner: you share information with precision, handle classified material with discipline, and build credibility with external organizations
• Operationally connected — you don't produce intelligence in isolation; your products actively drive hunt operations, detection improvements, and leadership decisions

One or more of the following is strongly preferred:

• GCTI (GIAC Cyber Threat Intelligence), CISM, CySA+, GCIA, CEH, or equivalent intelligence or security operations credential

• Prior Intelligence Community (IC) experience in a cyber-focused analytical role
• Experience producing all-source intelligence products in a federal civilian or national security environment
• Familiarity with classified intelligence sharing frameworks and interagency coordination protocols
• Background in geopolitical threat analysis or nation-state adversary tracking
• Experience with threat intelligence platforms (TIPs) and automated IOC enrichment workflows
• Mobile device security expertise or experience conducting travel security assessments for high-risk destinations

#DICE #LinkedIn