Cyber Threat Intelligence Analyst, Mid

As a cyber threat intelligence (CTI) analyst, you know how to support a Security Operations Center (SOC) by collecting, analyzing, and correlating CTI from a wide range of open‑source, commercial, government, and industry partners. This role manages and operationalizes Threat Connect to enrich SOC investigations, identify emerging threats, and maintain high‑quality intelligence workflows. The analyst develops and disseminates actionable intelligence products such as reports, alerts, and briefings, to inform SOC operations, leadership, and mission stakeholders.

The position also facilitates intelligence sharing and collaboration across interagency and cross‑industry communities such as ISACs and AIS, ensuring timely exchange of relevant threat information. Additionally, the analyst contributes to the maturity of the CTI program by conducting annual capability assessments, identifying gaps, and developing strategic roadmaps to enhance intelligence processes, tooling, and integration with SOC operations. Cyber threats are evolving.

Booz Allen is committed to creating an environment where you not only keep pace with the industry, but propel it forward. With access to academic programs, certifications, and opportunities to use expert tradecraft, we’ll continuously invest in you so you can create the career you want as you grow. Join us. The world can’t wait.

• 2+ years of cyber threat intelligence experience supporting SOC or incident response, including intelligence analysis or threat research
• Experience collecting, analyzing, and correlating intelligence from open and closed sources, including government, commercial, and industry feeds
• Experience managing or administering threat intelligence platforms
• Experience with intelligence sharing frameworks and communities, including ISACs, AIS, or federal information‑sharing programs
• Knowledge of cyber threat actor tactics, techniques, and procedures (TTPs), and frameworks such as MITRE ATT&CK
• Ability to develop actionable intelligence products such as reports, alerts, and briefings, for leadership and technical and non‑technical audiences
• Ability to obtain and maintain a Public Trust or Suitability/Fitness determination based on client requirements
• Bachelor’s degree

• Experience supporting SOC investigations with threat enrichment, indicator analysis, or adversary profiling
• Experience with structured analytic techniques used in intelligence analysis
• Experience with Threat Connect playbooks, indicator management, or intelligence lifecycle workflows
• Experience conducting CTI program maturity assessments, gap analyses, or roadmap development
• Knowledge of Zero Trust, EDR technologies, or modern enterprise security architectures
• Knowledge of malware analysis fundamentals, network forensics, or threat hunting concepts
• Possession of strong written and verbal communication skills
• CompTIA CySA+, GIAC Cyber Threat Intelligence (GCTI), GIAC Open‑Source Intelligence (GOSI), Certified Threat Intelligence Analyst (CTIA), CISSP, or similar Industry Certifications

At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work‑life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full‑time and part‑time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen’s benefit programs.

Individuals that do not meet the threshold…