Cyber Threat Intelligence Analyst

• Employment Type: Full Time
• Directorate: Cyber Security Engineering
• Location: Northern Virginia-Herndon/Mc Lean
• Clearance: Active TS/SCI with Full Scope Polygraph Required
• Experience Level: Mid-Level, 3-5+ Years

Altus Consulting is seeking skilled Cyber Threat Intelligence Analysts to support a mission-focused Cyber Security Operations Center (CSOC) and Cyber Incident Response Team (CIRT) within a highly secure customer environment. The selected candidates will transform security telemetry and threat information into actionable intelligence that strengthens operational awareness, threat detection, incident response, and cyber defense decision-making.

This position requires hands-on security operations experience, exceptional analytical skills, and the ability to bridge the gap between cybersecurity operations and threat intelligence. The Cyber Threat Intelligence Analyst will analyze data from SIEM, SOAR, IDS/IPS, network monitoring, and endpoint security platforms, translating findings into actionable intelligence products, threat reporting, dashboards, playbooks, and operational procedures that improve cyber defense capabilities.

• Analyze security data from SIEM, SOAR, IDS/IPS, network monitoring, endpoint detection, and other cybersecurity platforms.
• Identify, track, and assess adversary tactics, techniques, and procedures (TTPs) using frameworks such as MITRE ATT&CK.
• Correlate threat intelligence with security events to improve detection, triage, threat hunting, and incident response activities.
• Produce actionable intelligence reports, threat briefings, cyber situational awareness products, and adversary assessments for operational stakeholders.
• Develop threat profiles and intelligence products that support security operations and cyber defense decision-making.
• Integrate cyber threat intelligence into daily SOC and incident response workflows.
• Support incident investigations by providing contextual intelligence and adversary attribution where appropriate.
• Collaborate with security engineers, analysts, responders, and leadership to operationalize cyber threat intelligence.
• Identify intelligence gaps and recommend improvements to detection, monitoring, and response capabilities.
• Develop executive and operational dashboards using Splunk, Elastic, or related analytics platforms.
• Create visualizations that communicate emerging threats, attack trends, threat actor activity, and operational metrics.
• Develop and maintain cyber defense playbooks, standard operating procedures (SOPs), and analytical methodologies.
• Document threat hunting processes, incident response procedures, and CTI workflows.
• Assist with automating intelligence collection, enrichment, analysis, and reporting activities.
• Support continuous improvement initiatives that enhance cyber defense operations and mission effectiveness.

• Strong analytical, critical-thinking, and problem-solving abilities.
• Experience conducting cyber threat analysis and intelligence production.
• Knowledge of the MITRE ATT&CK framework and adversary TTP analysis.
• Experience developing dashboards, reports, and security visualizations.
• Experience supporting threat hunting, cyber defense, incident response, or security operations activities.
• Experience writing technical documentation, operational playbooks, and standard operating procedures.
• Familiarity with Dev Sec Ops  concepts and secure development practices.
• Experience with EDR/XDR technologies and threat intelligence platforms such as MISP, Threat Connect, Anomali, or Recorded Future.
• Familiarity with Python, Power Shell, or other automation and scripting technologies.
• Experience with cloud security monitoring in AWS, Microsoft Azure, or Google Cloud environments.
• Experience developing security…