Cyber Threat Intelligence Analyst

The role

The Cyber Threat Intelligence Analyst proactively identifies, analyzes, and counteracts sophisticated cyber threats. This role involves conducting deep research, developing actionable intelligence, and owning the Cyber Threat Operations Center processes.

What you will do

• Identify and analyze attacker campaigns and techniques
• Conduct research on emerging threats and vulnerabilities
• Produce actionable intelligence to drive protection enhancements
• Prototype new detection methods and experiment with data sources
• Conduct threat modeling using frameworks like MITRE ATT&CK or STRIDE
• Collaborate with data scientists, threat hunters, and engineers
• Develop and implement updates to CTOC processes and tools
• Publish intelligence on TTPs and campaigns
• Provide support to SOC exercises
• Provide threat intelligence support during incident response

Required qualifications

• Bachelor's Degree in Cybersecurity, Computer Science, Engineering, Information Technology, or related field AND 5+ years of experience in Cyber Threat Intelligence Security Operations, Cyber Incident
• DoD 8570 IAT Level 2 or DoD 8140 compliant certification
• Proficiency in using Threat Intelligence Platforms (TIPs) and SIEM tools (e.g., Splunk, Sentinel, etc.)
• Strong understanding of cybersecurity protection tools (e.g., Firewalls, IDS/IPS, NSGs, etc.)
• Demonstrated experience in threat modeling using frameworks such as MITRE ATT&CK, STRIDE, or similar
• Strong skills in developing and maintaining detailed threat intelligence reports, dashboards, SOPs and briefings
• Experience in integrating and leveraging multiple threat intelligence feeds and sources
• Active TS/SCI federal security clearance
• Valid US passport

Nice to have

• Experience with XDR, EDR, and SIEM tools like 365 Defender, Sentinel, Trellix, Nessus, etc.
• Experience operating in the cloud environment
• Experience in proactive threat hunting and identifying indicators of compromise (IOCs) and tactics, techniques, and procedures (TTPs)
• Advanced certifications such as CISSP, CISA, CISM, SANS, GCIA, GCIH, OSCP
• CISSP, CISA, CISM, SANS, GCIA, GCIH, OSCP, and/or Security+ certification

Benefits

• Hands-on experience
• Certifications
• Industry training

Before you apply

• Must obtain Microsoft SC-200 within (6) months of hire
• Must have an active TS/SCI federal security clearance
• Must have a valid US passport
• Applicants for employment in the US must have work authorization that does not now or in the future require sponsorship of a visa for employment authorization in the United States
• Candidates currently employed by a client of Accenture Federal Services or an affiliated Accenture business may not be eligible for consideration

About the company

Accenture Federal Services is a technology company within global Accenture that helps the US federal government. Its 13,000+ people work across defense, national security, public safety, civilian, and military health organizations.