ZipRecruiter

Log In

1

Internship Cyber Threat Intelligence Analyst Jobs

Hireblazer

Cyber Threat Intelligence Analyst

Austin, TX · On-site

$60 - $80/hr

Cyber Threat Intelligence Analyst Duration: 12 months Location: Austin, TX (Onsite-Candidates must be local to the Austin area) Responsibilities: The Cybersecurity Operations Center (CSOC) Threat ...

ManTech

Cyber Threat Intelligence Analyst

Lorton, VA · On-site

$141K - $236K/yr

The core responsibility of the Cyber Threat Intelligence Analyst is to conduct deep research into social engineering and cyber-attack campaigns and collaborate closely with data scientists ...

next page

Showing results 1-20

All Jobsinternship JobsTechnology JobsNetworking JobsCyber Security Engineer JobsInternship Cyber Threat Intelligence Analyst Jobs

Internship Cyber Threat Intelligence Analyst information

See salary details

$64.5K

$109.8K

$156K

How much do internship cyber threat intelligence analyst jobs pay per year?

As of Aug 24, 2026, the average yearly pay for internship cyber threat intelligence analyst in the United States is $109,848.00, according to ZipRecruiter salary data. Most workers in this role earn between $87,500.00 and $130,000.00 per year, depending on experience, location, and employer.

What does an internship cyber threat intelligence analyst do?

An Internship Cyber Threat Intelligence Analyst assists in identifying, analyzing, and reporting on cyber threats that could impact an organization. They work closely with experienced analysts to monitor security alerts, gather intelligence from various sources, and help assess potential risks. Interns may also contribute to threat research, create reports, and support incident response efforts. This role provides hands-on experience with cybersecurity tools and practices, helping interns develop key skills for a career in cyber threat intelligence.

What are the key skills and qualifications needed to thrive as an internship cyber threat intelligence analyst?

To thrive as an Internship Cyber Threat Intelligence Analyst, you need foundational knowledge of cybersecurity concepts, threat analysis, and a relevant academic background in computer science, information security, or a related field. Familiarity with SIEM tools, threat intelligence platforms, and basic programming or scripting languages is typically expected. Analytical thinking, attention to detail, and effective communication stand out as important soft skills in this role. These skills and qualifications are crucial for identifying cyber threats, communicating findings, and supporting proactive security measures in dynamic environments.

What types of projects and responsibilities can an intern expect in a cyber threat intelligence analyst role?

As an intern Cyber Threat Intelligence Analyst, you can expect to assist with monitoring and analyzing cyber threats, collecting open-source intelligence, and supporting the creation of threat reports. Typical tasks may include researching the latest malware trends, helping track threat actor activities, and collaborating with senior analysts to assess potential risks to the organization. Interns often participate in team meetings and may contribute to incident response exercises, providing a valuable hands-on learning experience within a supportive team environment.

What is the difference between Internship Cyber Threat Intelligence Analyst vs Cyber Threat Intelligence Analyst?

AspectInternship Cyber Threat Intelligence AnalystCyber Threat Intelligence Analyst
CredentialsTypically pursuing or recent graduate, some certifications beneficialUsually requires relevant certifications like GIAC, CISSP, or CEH
Work EnvironmentInternship setting, learning-focused, part-time or temporaryFull-time, professional role within security teams
Employer & IndustryInternship programs in cybersecurity firms, government agencies, or corporationsFull-time positions in similar organizations
Search & Comparison IntentEntry-level, learning, career explorationProfessional development, career advancement

The main difference between an Internship Cyber Threat Intelligence Analyst and a Cyber Threat Intelligence Analyst is experience level and responsibilities. Internships are designed for beginners or students gaining exposure, while full analyst roles require more experience and certifications. Interns focus on learning and supporting existing teams, whereas analysts independently handle threat intelligence tasks.

What cities are hiring for Internship Cyber Threat Intelligence Analyst jobs?

Cities with the most Internship Cyber Threat Intelligence Analyst job openings:

What are the most commonly searched types of Cyber Threat Intelligence Analyst jobs?

The most popular types of Cyber Threat Intelligence Analyst jobs are:

What states have the most Internship Cyber Threat Intelligence Analyst jobs?

States with the most job openings for Internship Cyber Threat Intelligence Analyst jobs include:

Internship Cyber Threat Intelligence Analyst jobs near you

Cyber Threat Intelligence Analyst

Mclean, VA • On-site

Digital Global Connectors
Network Security • 11 - 50 employees
Learn more about Digital Global Connectorsexternal

$120 - $170/hr

Other

Posted 6 days ago

Job description

Cyber Threat Intelligence Analyst

Location: Bethesda, MD (Hybrid; On-site as Required)

Clearance: Tier 2 Public Trust (Required)

Employment Type: Full-Time

Position Summary

Digital Global Connectors (DGC) is seeking an experienced Cyber Threat Intelligence Analyst to support a Federal information security program. The Cyber Threat Intelligence Analyst is responsible for collecting, analyzing, correlating, and disseminating cyber threat intelligence to support enterprise cyber defense, incident response, vulnerability management, and proactive threat mitigation.

This position analyzes threat actor tactics, techniques, and procedures (TTPs), develops actionable intelligence products, monitors the evolving cyber threat landscape, and provides strategic and operational intelligence that enables informed cybersecurity decision-making. The analyst works closely with Threat Hunters, Incident Responders, Security Operations Center (SOC) personnel, Security Engineers, ISSOs, and program leadership to strengthen the organization's cybersecurity posture through intelligence-driven operations.

The successful candidate will possess extensive experience analyzing cyber threats, producing intelligence reports, and applying threat intelligence to improve enterprise detection, prevention, and response capabilities.

Essential Duties and Responsibilities Cyber Threat Intelligence Collection
  • Collect cyber threat intelligence from commercial, open-source, government, and industry information sources.
  • Evaluate intelligence for relevance, credibility, accuracy, and operational value.
  • Monitor emerging cyber threats affecting Federal information systems and critical infrastructure.
  • Identify threat actors, campaigns, malware families, vulnerabilities, and exploit activity.
  • Maintain awareness of evolving cybersecurity trends and adversary capabilities.
  • Support enterprise cyber defense through timely intelligence dissemination.
Threat Analysis
  • Analyze attacker tactics, techniques, and procedures (TTPs).
  • Correlate threat intelligence with enterprise security events and operational risks.
  • Identify indicators of compromise (IOCs) and indicators of attack (IOAs).
  • Evaluate adversary motivations, capabilities, infrastructure, and targeting.
  • Assess threats to enterprise systems, cloud environments, and mission operations.
  • Develop intelligence assessments supporting cybersecurity decision-making.
Intelligence Production

Develop and maintain intelligence products including:

  • Tactical Threat Reports
  • Operational Threat Assessments
  • Strategic Intelligence Reports
  • Threat Actor Profiles
  • Malware Intelligence Reports
  • Vulnerability Intelligence Summaries
  • Executive Intelligence Briefings
  • Indicators of Compromise (IOC) Bulletins
  • Emerging Threat Advisories
  • Intelligence Dashboards

Ensure intelligence products are timely, actionable, technically accurate, and appropriate for both technical and executive audiences.

Intelligence Integration
  • Support Threat Hunters by identifying emerging attacker behaviors and hunting opportunities.
  • Provide actionable intelligence to Incident Responders during active investigations.
  • Assist Security Engineers in improving enterprise detection capabilities.
  • Support Vulnerability Management personnel by prioritizing vulnerabilities based on active threat intelligence.
  • Recommend defensive measures based on current adversary activity.
  • Collaborate with SOC personnel to improve alert fidelity and operational awareness.
Threat Intelligence Platforms

Utilize technologies and intelligence sources including:

  • Microsoft Sentinel
  • Splunk Enterprise Security
  • Microsoft Defender XDR
  • Microsoft Defender Threat Intelligence
  • Recorded Future
  • MISP (Malware Information Sharing Platform)
  • VirusTotal
  • AlienVault Open Threat Exchange (OTX)
  • CISA Known Exploited Vulnerabilities (KEV) Catalog
  • MITRE ATT&CK Framework
  • MITRE D3FEND
  • Open Source Intelligence (OSINT) Platforms
  • Security Information and Event Management (SIEM)

Evaluate and integrate intelligence from multiple sources to support operational decision-making.

Vulnerability Intelligence
  • Analyze newly disclosed vulnerabilities for organizational impact.
  • Assess exploitability and threat activity associated with Common Vulnerabilities and Exposures (CVEs).
  • Monitor active exploitation campaigns.
  • Support prioritization of vulnerability remediation activities.
  • Provide risk-based recommendations to Vulnerability Management teams.
  • Track emerging threats associated with software, hardware, and cloud services.
Threat Hunting Support
  • Develop threat hunting hypotheses based on current intelligence.
  • Recommend new detection use cases and behavioral analytics.
  • Identify opportunities to improve enterprise detection capabilities.
  • Support adversary emulation and purple team exercises.
  • Assist Threat Hunters with intelligence-driven investigations.
Reporting and Documentation

Develop and maintain:

  • Threat Intelligence Reports
  • Threat Actor Profiles
  • Executive Briefings
  • Intelligence Dashboards
  • Indicators of Compromise (IOC) Reports
  • Vulnerability Intelligence Bulletins
  • Malware Intelligence ReportsThreat Trend Analyses
  • Standard Operating Procedures
  • Lessons Learned

Ensure documentation is technically accurate, actionable, and aligned with organizational reporting standards.

Collaboration
  • Coordinate with Threat Hunters, Incident Responders, Digital Forensics Analysts, Security Engineers, ISSOs, Vulnerability Management personnel, SOC Analysts, and Government stakeholders.
  • Participate in cybersecurity working groups and threat intelligence exchanges.
  • Present intelligence findings to technical teams and executive leadership.
  • Support enterprise cybersecurity exercises and operational planning.
  • Promote intelligence sharing across cybersecurity disciplines.
Continuous Improvement
  • Monitor evolving adversary tradecraft and emerging cyber threats.
  • Evaluate new intelligence sources and analytical methodologies.
  • Recommend improvements to enterprise threat intelligence capabilities.
  • Develop repeatable intelligence processes and analytical frameworks.
  • Maintain professional certifications and technical expertise in cyber threat intelligence.
Minimum Qualifications
  • Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Intelligence Studies, Information Systems, or a related discipline.
  • Minimum five (5) years of experience performing cyber threat intelligence analysis or cyber defense operations.
  • Experience producing tactical, operational, and strategic cyber threat intelligence.
  • Experience analyzing threat actors, malware, vulnerabilities, and attacker tactics.
  • Experience utilizing threat intelligence platforms and security monitoring technologies.
  • Strong analytical, research, writing, briefing, and communication skills.
  • U.S. Citizenship required.
  • Ability to obtain and maintain a Tier 2 Public Trust.
Preferred Qualifications
  • Master's degree in Cybersecurity, Intelligence Studies, Information Assurance, or a related discipline.
  • Experience supporting a Federal civilian agency.
  • Experience utilizing the MITRE ATT&CK Framework for intelligence analysis.
  • Experience supporting enterprise cyber defense or Security Operations Center environments.
  • GIAC Cyber Threat Intelligence (GCTI)
  • Certified Threat Intelligence Analyst (CTIA)
  • GIAC Certified Intrusion Analyst (GCIA)
  • CompTIA CySA+
  • Microsoft Certified: Security Operations Analyst Associate (SC-200)
  • Certified Information Systems Security Professional (CISSP) (preferred)
Knowledge, Skills, and Abilities
  • Cyber Threat Intelligence
  • Threat Analysis
  • Threat Hunting Support
  • Threat Actor Profiling
  • Vulnerability Intelligence
  • Malware Intelligence
  • Indicators of Compromise (IOCs)
  • Indicators of Attack (IOAs)
  • MITRE ATT&CK Framework
  • MITRE D3FEND
  • Microsoft Sentinel
  • Splunk Enterprise Security
  • Microsoft Defender XDR
  • Microsoft Defender Threat Intelligence
  • Recorded Future
  • MISP
  • VirusTotal
  • AlienVault OTX
  • CISA Known Exploited Vulnerabilities (KEV)
  • Security Information and Event Management (SIEM)
  • Open Source Intelligence (OSINT)
  • Risk Analysis
  • Executive Briefing Development
  • Technical Writing
  • Microsoft Office Suite
  • ServiceNow
  • Jira
Security Requirements
  • Ability to successfully obtain and maintain a Tier 2 Public Trust investigation.
  • Compliance with all applicable Federal security, privacy, ethics, and information assurance training requirements before receiving system access.
  • Ability to support cybersecurity operations, incident response activities, continuity of operations (COOP), emergency response, and surge support as required.
  • Must maintain strict confidentiality while handling sensitive threat intelligence, operational assessments, investigative findings, and Federal information systems.
  • Ability to analyze complex cyber threats, produce actionable intelligence, communicate findings to technical and executive stakeholders, and strengthen enterprise cyber defense through timely, intelligence-driven recommendations and continuous monitoring of the evolving threat landscape.
#J-18808-Ljbffr

Apply