Cyber Threat Intelligence (CTI) Analyst

Job Description

Job Description

Position Summary

We are seeking a Mid-Level Cyber Threat Intelligence (CTI) Analyst to join our cybersecurity team in Huntsville. This role is ideal for someone with a strong intelligence analysis background and a passion for identifying, tracking, and mitigating cyber threats. The CTI Analyst will be responsible for collecting, analyzing, and disseminating actionable intelligence to protect enterprise networks and systems against advanced threats.

The successful candidate will leverage SIEM tools, threat feeds, and intelligence platforms to proactively monitor adversary tactics, techniques, and procedures (TTPs) and provide insight to leadership, SOC operators, and incident response teams.

Key Responsibilities

• Collect, analyze, and evaluate cyber threat intelligence from open-source, classified, and commercial sources.

• Identify and track adversary TTPs, campaigns, and threat actors relevant to enterprise operations.

• Correlate threat intelligence with SIEM data (Splunk Enterprise Security and Microsoft Sentinel) to identify malicious activity.

• Prepare intelligence products, threat assessments, and briefings for leadership, SOC teams, and stakeholders.

• Support incident response activities with adversary context and attribution analysis.

• Collaborate with SOC, Hunt, and IR teams to provide proactive defense measures.

• Recommend improvements to threat intelligence processes, data collection, and analytic tradecraft.

• Act as a subject matter expert on the cyber threat landscape and contribute to red/blue team exercises.

Required Qualifications

• Bachelor’s degree in Intelligence Studies, Cybersecurity, Computer Science, or related field.

• 5+ years of intelligence or cybersecurity analysis experience with a focus on cyber threat intelligence.

• Proficiency with Splunk Enterprise Security (Required).

• Experience with Microsoft Sentinel (Preferred).

• Strong knowledge of intelligence cycle, analytic tradecraft, and structured analytic techniques.

Preferred Certifications (one or more desired):

• GIAC Cyber Threat Intelligence (GCTI)

Company Description

Our firm is a small business located in Arlington Virginia. D A LABS is an information technology services firm with numerous active contracts with the Department of Justice and Department of Defense. Founded in 2005, D A LABS has a long history of successful endeavors, and our customers are routinely satisfied with our integration and operational capabilities.

D A LABS provides 10 federal holidays as well as 15 additional PTO days off per year as well as a rich benefits package. Medical/Dental/Vision insurance, and a percentage matching 401K program are available.

Company Description

Our firm is a small business located in Arlington Virginia. D A LABS is an information technology services firm with numerous active contracts with the Department of Justice and Department of Defense. Founded in 2005, D A LABS has a long history of successful endeavors, and our customers are routinely satisfied with our integration and operational capabilities.\r\n\r\nD A LABS provides 10 federal holidays as well as 15 additional PTO days off per year as well as a rich benefits package. Medical/Dental/Vision insurance, and a percentage matching 401K program are available.