About the Role
Support cyber threat intelligence and adversary analysis activities to identify, assess, and communicate threats to client systems, networks, missions, and operations. Conduct detailed research and analysis of cyber threat actors, campaigns, infrastructure, malware, vulnerabilities, and tactics, techniques, and procedures using classified and unclassified intelligence sources.
Responsibilities
- Collect, evaluate, correlate, and synthesize technical and intelligence reporting to develop actionable threat assessments, indicators of compromise, and intelligence products.
- Apply structured analytic techniques and intelligence tradecraft to assess threat actor intent, capability, opportunity, targeting, and potential mission impact.
- Maintain strict attention to detail when evaluating source reliability, confidence levels, attribution indicators, technical artifacts, and reporting consistency.
- Use managed attribution and operational security tools to conduct authorized research while protecting analyst identity, organizational attribution, and sensitive collection activities.
- Support threat research involving language sources, language reporting, forums, technical publications, and open-source material.
- Collaborate with penetration testers, red teams, security operations teams, incident responders, vulnerability analysts, intelligence professionals, and mission stakeholders to translate threat intelligence into assessment objectives, defensive priorities, adversary emulation scenarios, and risk-informed recommendations.
- Contribute to written intelligence products, technical reports, briefings, presentations, and client deliverables while independently managing assigned research and analysis tasks.
Requirements
- 2+ years of experience in cyber threat intelligence, all-source intelligence, cyber operations, intelligence analysis, incident response, security operations, or a cybersecurity field
- Experience researching cyber threats, malware, vulnerabilities, threat actors, and adversary tactics, techniques, and procedures (TTPs), and producing intelligence assessments, threat reports, or operational briefings
- Experience analyzing technical cyber information, including indicators of compromise, malware, infrastructure, network activity, vulnerabilities, and attacker methodologies, while applying analytic frameworks such as MITRE ATT&CK, the Cyber Kill Chain, or the Diamond Model
- Experience evaluating intelligence reporting through source validation, analytic confidence, attribution assessment, and identification of intelligence gaps while producing accurate, well-organized, and defensible analytic products
- Experience communicating technical and intelligence findings to technical, operational, and executive audiences and collaborating effectively across multidisciplinary cyber, intelligence, engineering, and mission teams
- Ability to conduct independent research, manage competing priorities, maintain operational security, and perform effectively in dynamic, fast-paced environments
- Ability to show a score of 2/2 on the ILR or DLPT in Arabic, Mandarin Chinese, or Russian
- Secret clearance
- Bachelor's degree in a Cybersecurity, Intelligence Studies, Computer Science, Information Technology, Engineering, International Relations, Political Science, or Regional Studies field and 2+ years of experience in cybersecurity or threat intelligence, or 6+ years of experience in cybersecurity or threat intelligence in lieu of a degree
- DoD 8140 cybersecurity certification, including Security+ certification
Skills
- Cyber threat intelligence
- All-source intelligence
- Cyber operations
- Intelligence analysis
- Incident response
- Security operations
- Cybersecurity
- Malware analysis
- Vulnerability analysis
- Threat actor research
- TTP analysis
- MITRE ATT&CK
- Cyber Kill Chain
- Diamond Model
- Source validation
- Analytic confidence assessment
- Attribution assessment
- Intelligence gap identification
- Technical communication
- Intelligence communication
- Operational security
- Managed attribution
- Arabic language proficiency
- Mandarin Chinese language proficiency
- Russian language proficiency
- Python scripting
- PowerShell scripting
Location
- Remote
Work Type
- Remote
- Hybrid
- Onsite
Experience Level
- 2+ years of experience
Education Level
- Bachelor's degree
- DoD 8140 cybersecurity certification
- Security+ certification
Salary/Compensations
- $61,900.00 to $141,000.00
Benefits
- Health benefits
- Life benefits
- Disability benefits
- Financial benefits
- Retirement benefits
- Paid leave
- Professional development
- Tuition assistance
- Work-life programs
- Dependent care
- Recognition awards program
About the Company
- At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being.
- Our people-first culture prioritizes the benefits of collaboration, whether it occurs in person or virtually.
Equal Opportunity
- All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, local, or international law.
