AI Analyst

Description

FRDA is seeking a junior Threat Intelligence Analyst to collaborate with SOC and IR teams by supporting the collection, analysis, and dissemination of cyber threat intelligence. This role leverages AI tools and data analysis techniques to enhance research, identify patterns, and improve the speed and quality of intelligence production without sacrificing value. Adversaries are using AI to facilitate attacks, and we need you to stay at least one step ahead of them.

This role is hybrid with some time in Tysons, Virginia.

• Collect and analyze threat intelligence from internal and external sources (OSINT, vendor feeds, security tools).
• Monitor threat actor activity, campaigns, and emerging vulnerabilities.
• Produce Timely, accurate, and actionable intelligence reports, summaries, and briefings for technical and non-technical audiences.
• Use AI tools to:
• Summarize large datasets and threat reports.
• Identify patterns, anomalies, and correlations across data sources.
• Assist in drafting and refining intelligence products.
• Enrich indicators of compromise (IOCs) with contextual information (threat actor attribution, tactics, infrastructure).
• Support detection and response teams by providing actionable intelligence.
• Maintain and update threat intelligence repositories and documentation.
• Stay current on evolving threats, tools, and adversary tactics.

• A minimum of one (1) year of experience in cybersecurity, threat intelligence, SOC, or related field.
• Foundational understanding of Cyber threat landscape (malware, phishing, ransomware, APTs) and Common frameworks (MITRE ATT&CK, NIST Cybersecurity Framework).
• Experience using threat intelligence platforms or tools (MISP, Recorded Future, Virus Total, etc.).
• Familiarity with AI/ML tools (LLMs, data analysis tools, etc.) and practical use cases in research or analysis.
• Strong analytical and critical thinking skills.
• Ability to clearly communicate findings in written and verbal formats.

• Basic scripting or data analysis skills (Python, SQL, or similar)
• Experience with OSINT techniques and tooling.
• Understanding of indicator enrichment and correlation workflows.
• Exposure to automation or API-based data collection.
• Background in security operations or incident response.