Cyber Intelligence Analyst

Job Description

Job DescriptionCyber Intelligence Analyst

Location: Huntsville, AL
Clearance Required: Active DoD Top Secret/SCI

Position Summary

Noetic is seeking a Cyber Intelligence Analyst to support intelligence analysis and cybersecurity missions in Huntsville, Alabama. The analyst will research and evaluate cyber threats, foreign adversary capabilities, and potential vulnerabilities affecting software, technology, and defense systems.

The successful candidate will use intelligence sources, cyber threat data, and analytical tools to identify threat actors, assess tactics and techniques, and develop intelligence reports and briefings. This role requires experience with all-source intelligence analysis, cyber operations, and the ability to communicate findings to technical and operational stakeholders.

Primary Responsibilities

• Conduct all-source counterintelligence and cyber threat analysis focused on foreign intelligence services, cyber threat actors, and potential threats to software supply chains.
• Research and analyze cyber threat information from open-source, commercial, subscription-based, and internal intelligence sources.
• Monitor and assess cyber threat data to identify attack patterns, adversary methods, tactics, techniques, procedures (TTPs), indicators of compromise (IOCs), and potential impacts.
• Use tools such as Splunk Enterprise Security and Microsoft Sentinel to support threat monitoring, analysis, and threat hunting.
• Develop intelligence reports, analytical products, and briefings that communicate cyber threats and adversary capabilities.
• Respond to requests for information and contribute to finished intelligence production.
• Assess cyber threats affecting military systems, software, platforms, and other defense capabilities.
• Evaluate foreign adversary capabilities to exploit, sabotage, subvert, or disrupt commercial off-the-shelf (COTS) and custom-developed software.
• Research software development practices, system services, open-source software, and software-as-a-service (SaaS) to understand potential vulnerabilities and supply chain risks.
• Identify gaps between actual cyber threats and available threat emulation capabilities.
• Support assessments of threat realism, operational effectiveness, suitability, and survivability of military systems.
• Coordinate with intelligence professionals, acquisition teams, industry partners, and other stakeholders.
• Work independently to develop and maintain analytical products while meeting mission requirements and established standards.

Basic Qualifications

• Active DoD Top Secret/Sensitive Compartmented Information (TS/SCI) clearance.
• Experience conducting defense intelligence or all-source intelligence analysis using intelligence tools and data sources to solve complex problems.
• Background in cyber operations or cyber intelligence, with a strong understanding of foreign cyber threats.
• Knowledge of current cyber threat actors, intrusion techniques, attack methods, TTPs, and IOCs.
• Experience researching, analyzing, documenting, and communicating technical information.
• Strong understanding of Intelligence Community Directive (ICD) 203 and ICD 206, including their application to intelligence analysis and reporting.
• Experience writing intelligence reports and developing analytical products and briefings.
• Experience using cyber threat intelligence or security monitoring tools, such as Splunk Enterprise Security or Microsoft Sentinel.
• Experience with threat hunting or analyzing cyber threat data from multiple sources.
• Understanding of the software industry, including programming services, system services, open-source software, and SaaS.
• Strong verbal, written, and briefing skills, with the ability to communicate technical and operational information to diverse audiences.
• Ability to work independently with minimal guidance while managing analytical tasks and priorities.
• Strong attention to detail and organizational skills.

Preferred Qualifications

• Experience developing comprehensive cyber threat assessments, particularly within the net-centric and cyber domains.
• Extensive knowledge of the software development lifecycle (SDLC).
• Understanding of adversarial threats and exploitation risks affecting software and technology supply chains.
• Familiarity with the MITRE ATT&CK framework or similar cyber threat frameworks.
• Knowledge of current and emerging cyber threats, including operational, developmental, and testing-related threat exploitation.
• Experience evaluating cyber threat capabilities and identifying gaps in threat emulation.
• Understanding of the Defense Acquisition Lifecycle.
• Experience supporting the Intelligence Community, Department of Defense, or other national security customers.
• Experience integrating cyber threat intelligence into assessments and recommendations that improve an organization's cybersecurity posture.