Skip to content

Trellix

US, Virginia, Fairfax; United States of America

Sr Cyber Threat Intelligence Analyst (TS/SCI Clearance Required)

Posted yesterday

Level
Senior
Experience
5+ years
Work style
On-site
Full-time
Clearance
TS/SCI

At a glance

The role in plain English

This is a senior-level cyber threat intelligence analyst role based on-site at Fort Belvoir, Virginia, supporting government closed and restricted networks. The position involves delivering actionable threat intelligence, conducting all-source analysis, and integrating intelligence into network defence operations. It suits professionals with experience in military or defence environments, strong analytical skills, and familiarity with advanced threat frameworks. The role requires regular collaboration with clients and internal teams, as well as mentoring peers.

What you'll do

  • Conduct all-source cyber threat analysis and reporting
  • Integrate threat intelligence into client network defence operations
  • Lead project activities across the delivery lifecycle
  • Deliver written reports and briefings to technical and executive audiences
  • Mentor consultants and contribute to training materials

What they're looking for

Essential

  • TS/SCI clearance
  • 5+ years in military or defence intelligence analysis
  • Proficiency with structured analytical techniques
  • Experience with XDR/EDR, SIEM, threat hunting, malware analysis
  • Familiarity with MITRE ATT&CK, Cyber Kill Chain, Diamond Model

Nice to have

  • 8140 IAT III certification
  • 8140 IASAE II certification

Core skills

  • Threat intelligence
  • Malware analysis
  • Threat hunting
  • XDR/EDR
  • SIEM
  • Structured analysis
  • Report writing
  • Client advisory

Certifications mentioned

  • 8140 IAT III
  • 8140 IASAE II

The shape of the job

Technical depth

4/5

FoundationalSpecialist

Pace

3/5

SteadyFast-moving

Ownership

4/5

GuidedSelf-directed

Teamwork

4/5

Heads-downHighly collaborative

Cyberend's reading of the listing, not the employer's own scores.

Application toolkit

Make your application count

See which requirements your CV meets and what is missing.

Your CV is used for this answer only and never stored.

Questions to prepare for

  1. 01Describe your experience integrating threat intelligence into network defence operations.
  2. 02How do you apply structured analytic techniques to avoid cognitive bias in analysis?
  3. 03What steps would you take to monitor and analyse a closed government network for threats?
  4. 04Explain your familiarity with MITRE ATT&CK and how you have used it in past roles.

About Trellix

Trellix is a global cybersecurity company providing AI-native security, threat intelligence, and automated detection and response for various environments, including government and defence.

Full job descriptionAs published by Trellix

Job Title:

Sr Cyber Threat Intelligence Analyst (TS/SCI Clearance Required) About Trellix   Trellix is a global cybersecurity leader helping organizations build cyber resilience for the AI era. Combining AI-native security, operational threat intelligence, and automated detection and response, Trellix provides defense-grade protection at machine speed across on-premises, air-gapped, operational technology, hybrid, and cloud environments. Trellix helps customers anticipate threats, scale effective security operations, maintain business continuity, and adapt their security posture for the modern threat landscape. Working with a broad partner ecosystem and global intelligence collaborators, Trellix helps strengthen the collective defense against cybercriminals and state-sponsored attacks. At Trellix, we empower professionals at all career stages to expand their technical expertise, lead strategic initiatives, and make a tangible global impact. Whether you are an industry pioneer or an emerging specialist, Trellix provides the tools and opportunities to enhance and expand your skill set. Join our mission to scale AI-driven cyber defense alongside an AI-accelerated threat landscape, and help build a safer, more resilient future . More at https://trellix.com .

Role Overview:

This is a Full time onsite role at Fort Belvoir, VA in a classified environment. You will serve as a specialized Cyber Threat Intelligence Analyst embedded within the client’s security operations, dedicated to the protection of government closed and restricted networks. Unlike commercial or public infrastructure environments, this role operates entirely within high-security environments, delivering actionable intelligence to support the defense of critical mission assets.

The Cyber Threat Intelligence Analyst will collaborate with customers to enhance their cyber threat intelligence capabilities by leveraging the experience, knowledge, tools, and data of the Trellix cyber defense enterprise. The role is responsible for delivering cyber threat intelligence services, which include knowledge of sophisticated threat actors and associated tactics, techniques, and procedures, along with research, collection, analysis, and reporting of finished intelligence. The role will support customer security operations including planning and risk assessment, vulnerability assessment, 24x7x365 monitoring, and incident response.

You will integrate directly with the client’s operations-intelligence cycle, functioning as a primary technical advisor to ensure that cyber threat intelligence is effectively injected into the network defense architecture.

Role Requirements:

Location: Fort Belvoir, VA

Clearance Required: TS/SCI

Workplace Type: Onsite

Up to 25% Travel Required

About the role:

As a Professional Services consultant, you will be responsible for consulting project activities from project initiation through project completion and final invoicing. A Professional Services consultant is expected to interface with internal and external customers and is expected to develop professional relationships that will enable them to achieve their goals.

Among the tasks that a PS consultant will be expected to deliver, are:

Engagement Lifecycle & Account Management

  • Lead project activities across the full delivery lifecycle, overseeing cost estimation, schedule monitoring, scope execution, and client invoicing.
  • Cultivate professional relationships across client organizations to ensure strategic alignment and project success.
  • Author detailed end-of-engagement reports summarizing analytical findings, technical assessments, and remediation recommendations.
  • Participate in sales efforts by developing proposals, presenting solution capabilities, and identifying growth opportunities with new and existing clients.

Threat Intelligence & Network Defense

  • Conduct all-source threat analysis using structured analytic techniques—such as Analysis of Competing Hypotheses (ACH) and Gap Analysis—to evaluate threat actor motivations, intent, and capabilities.
  • Monitor closed and restricted networks for anomalies, correlating indicators of compromise (IOCs) with adversarial tactics, techniques, and procedures (TTPs) to support SOC teams during incident response.
  • Knowledge in Threat Landscape Management. Continuously map global cyber activity against geopolitical events to deliver tailored defense strategies aligned with the client’s risk profile.

Operational Integration & Client Advisory

  • Collaborate with mission partners to define Intelligence Requirements (IRs), address intelligence gaps, and align threat research with strategic priorities.
  • Deliver written intelligence reports and conduct briefing presentations for diverse audiences ranging from technical staff to executive leadership (General/Flag Officers, SES/SIS, and C-Suite).

Practice Growth & Mentorship

  • Identify opportunities to optimize existing operational processes, analytical workflows, and delivery methodologies.
  • Mentor peer consultants, lead knowledge-sharing sessions, and assist in creating or updating training materials.
  • Maintain advanced technical proficiency through formal training and self-directed skill development.

Required Qualifications:

  • Experience: Minimum 5+ years of intelligence gathering, analysis, and reporting experience within military or defense environments.
  • Analytical Proficiency: Deep expertise in structured analytical techniques and a demonstrated ability to avoid cognitive biases in high-stakes environments.
  • Technical Expertise: Strong background in XDR/EDR, endpoint security tools, threat hunting, and malware analysis. Experience with SIEM tools and event correlation is required.
  • Framework Familiarity: Proficiency with industry standards, including MITRE ATT&CK/D3FEND, the Cyber Kill Chain, and the Diamond Model.
  • Certifications: Must hold or be willing to obtain 8140 IAT III and 8140 IASAE II certifications.
  • Education: BA/BS +4 years recent specialized or AA/AS +6years recent specialized or a major cert + 8 years recent specialized

Company Benefits and Perks:

We believe that the best solutions are developed by teams who embrace each other's unique experiences, skills, and abilities. We work hard to create a dynamic workforce where we encourage everyone to bring their authentic selves to work every day. We offer a variety of social programs, flexible work hours and family-friendly benefits to all of our employees.

  • Retirement Plans
  • Medical, Dental and Vision Coverage
  • Paid Time Off
  • Paid Parental Leave
  • Support for Community Involvement

We're serious ab out our commitment to a workplace where everyone can thrive and contribute to our industry-leading products and customer support, which is why we prohibit discrimination and harassment based on race, color, religion, gender, national origin, age, disability, veteran status, marital status, pregnancy, gender expression or identity, sexual orientation or any other legally protected status.

Our Commitment to You:

At Trellix, we are committed to creating a safe and trustworthy experience for our customers, employees, and candidates. Please be aware that fraudulent recruiting activity can occur through fake job postings or impersonated communications.

Trellix conducts interviews through professional channels only and does not use text messages, instant messaging, or group chats for interviews. We will never request sensitive personal information—such as your date of birth, Social Security number, or national ID number—during the interview process.

Trellix also does not require candidates to pay fees, purchase products or services, or process payments of any kind as part of the recruiting or hiring process. And Trellix will never keep any original work authorization documents that we may be required to review during the hiring process.

If you have questions or believe you may have encountered fraudulent activity related to Trellix recruiting, please contact us at ethics@trellix.com .

  • Trellix

    Posted 14 Sept

    Cleared Cyber Security Engineer

    US, Maryland, Columbia; United States of America · On-site

    Deploy, operate, and maintain endpoint detection and response security systems onsite for a US government customer at Ft. Meade. Requires active TS/SCI with Full Scope Polygraph and a DOD8140/8570 compliant cybersecurity certification.

    SeniorEndpoint securityIncident analysisSystem integration
  • US - Remote · $347k to $510k

    Lead and coordinate responses to complex security incidents, managing containment and recovery while working with security and infrastructure teams. Requires experience in incident response and detection engineering, and ability to coordinate across time zones.

    SeniorIncident responseDetection engineeringStakeholder communication
  • Recorded Future, Inc.

    New

    Senior Threat Intelligence Analyst

    Remote (USA) · $129k to $193.5k

    Research and analyze cybercriminal activity on dark web platforms, identify threat actors and trends, and produce intelligence reports. Requires experience with threat intelligence, OSINT, and cybercrime research, remote in the USA.

    SeniorOSINTRussian languageOPSEC
  • United States · Remote

    Lead incident response investigations for operational technology in the public sector, advise federal customers on IR maturity, and conduct workshops and assessments. Requires strong experience in OT incident response and consulting.

    SeniorIncident responseDigital forensicsICS/OT security

Hand-picked cyber jobs, every morning.

Cyberend Daily sends a graduate, mid-level, senior and leadership role each day, alongside the security news worth knowing. Free.

Includes our free beginner roadmap · No spam · Unsubscribe anytime