Cyber Threat Intelligence Analyst

A cyber threat intelligence analyst in Accenture Federal Services' Cyber Resilience and Defense group in Lorton, Virginia, who owns the threat intelligence processes of the Cyber Threat Operations Center. The analyst tracks attacker campaigns and techniques that slip past existing defences, researches emerging threats, prototypes new detection methods and data sources, builds threat models with MITRE ATT&CK or STRIDE, supports red and purple team exercises and incident investigations, mentors colleagues and briefs leadership. On-call duty and work outside core hours can come up.

It asks for five or more years in threat intelligence, security operations, incident response or threat hunting, a DoD 8140 certification, SC-200 within six months of joining, threat intelligence platform and SIEM skills, and an active TS/SCI clearance.