Cyber Threat Intelligence (CTI) Analyst

Founded in 2001, Indigo IT is an award winning information technology consulting and services company. We are a trusted services provider to government agencies seeking innovative Cloud, Cybersecurity, Knowledge Management, and Enterprise solutions. We know our defense, federal, and civilian customers have critical IT infrastructures that must remain reliable, available, and maximized. Indigo IT is mission focused and committed to maintaining a sense of urgency in anticipating and supporting our customers' technology goals and objectives. Our unique ability to think beyond today allows our clients to stay ahead of their IT challenges. As a Veteran-Friendly employer, we are proudly partnered with the Virginia Values Veterans (V3) Program, and a recipient of the HIRE Vets Gold Medallion Award, which recognizes our commitment to recruiting our nation's Veterans. Recognized on the Inc. 5000 list of America's fastest growing companies in 2020 & 2021 and named as one of the 2022 Best Places to Work in Virginia, we are always looking to hire top talent in the field - come join us today!

The Cyber Threat Intelligence (CTI) Analyst is responsible for collecting, analyzing, and disseminating actionable cyber threat intelligence to support an Army contract. This role provides intelligence-driven analysis that enhances threat detection, informs Purple Team assessments, prioritizes remediation efforts, and improves the organization's overall cyber defense posture.

Key Responsibilities:

• Collect, analyze, and correlate cyber threat intelligence from classified and open-source reporting to identify emerging threats, adversary activity, and attack trends.
• Produce timely intelligence reports, threat assessments, and briefings for supported commanders, Regional Cyber Centers (RCC), ARCYBER, and cybersecurity leadership.
• Provide actionable intelligence to support Blue Team detection engineering, threat hunting, and incident response activities.
• Partner with Purple Team personnel to develop intelligence-driven assessment objectives and adversary emulation scenarios.
• Develop, review, validate, and maintain detection signatures and indicators of compromise (IOCs), ensuring proper syntax, functionality, and minimal false positives before deployment.
• Support continuous improvement of enterprise detection capabilities by reviewing and refining signature content, detection logic, and threat indicators.
• Conduct signature development and testing within isolated environments prior to production implementation.
• Track adversary tactics, techniques, and procedures (TTPs) using frameworks such as MITRE ATT&CK and provide recommendations to strengthen defensive capabilities.
• Maintain awareness of emerging cyber threats and communicate relevant intelligence to stakeholders across the cybersecurity enterprise.

Preferred Qualifications:

• 5+ years experience performing Cyber Threat Intelligence analysis within a DoD, Intelligence Community, or federal cybersecurity environment.
• Strong understanding of nation-state and advanced persistent threat (APT) actors, malware analysis, and cyber threat reporting.
• Experience with threat intelligence platforms, SIEM technologies, detection engineering, and indicator management.
• Knowledge of MITRE ATT&CK, Cyber Kill Chain, STIX/TAXII, and common threat intelligence methodologies.
• Experience developing or validating detection signatures, YARA rules, Snort/Suricata signatures, or SIEM detection content is preferred.
• Excellent analytical, written, and verbal communication skills with experience producing executive and technical intelligence products.
• Active DoD Secret clearance with TS/SCI eligibility

Apply for this Position