A

Agile Defense

Cybersecurity and IT services for government

Cyber Threat Intelligence Lead - CBP

Security Operations & Incident ResponseConfirmed live in the last 24 hours
Full-timeReston, VA, USA

About the Job

Requirements

  • Seven years of experience as a Tier III senior cybersecurity analyst performing intelligence analysis, collection management, and technical analysis.
  • Five years of hands-on experience, including experience within the last two years, with host-based and network-based security monitoring using cybersecurity capabilities.
  • A bachelor's degree in computer science, engineering, cybersecurity, or STEM.
  • A strong cybersecurity background with experience identifying advanced cyber threat activities, intrusion detection, incident response, malware analysis, security content development such as signatures and rules, and cyber threat intelligence.
  • Ability to read and write intermediate-level scripts to support cyber threat detection, including VBScript, Python, PowerShell, HTML, and XML.
  • Ability to perform cyber threat analysis and identify, mitigate, or remediate courses of action, including developing actionable intelligence to protect organizational IT assets.
  • Active Top Secret clearance with SCI eligibility, and the ability to obtain and maintain a CBP Background Investigation and EOD.
  • U.S. citizenship.

Responsibilities

  • Direct the collection, analysis, production, and integration of cyber threat intelligence into CSOC detection and response workflows.
  • Maintain continual situational awareness and applicable context of threat actors, tactics, techniques, and procedures, and active campaigns to inform detection content, cyber hunting priorities, and strategic leadership decisions.
  • Produce actionable intelligence reports, indicators of compromise, and early-warning assessments to support CSOC operations.
  • Integrate with detection engineering and threat hunting teams and drive development of signatures, rules, queries, and detection content.
  • Maintain comprehensive tracking of threat actors, trends, and metrics.
  • Deliver timely customized strategic, tactical, or metrics-based reports to customers.

Desired Qualifications

  • GCTI certification.
  • GFCA certification.
  • Active CBP Background Investigation.

About the Company

Agile Defense

Cybersecurity and IT services for government

Agile Defense provides IT and cybersecurity services to the U.S. Federal Government, including digital transformation, IT modernization, and a Virtual Security Operations Center (VSOC) to defend against cyber threats. Its services support national security and civilian missions across federal agencies, delivered through various contract vehicles. The company expands its capabilities through acquisitions (IntelliBridge and XOR Security) and focuses on AI-enabled workforce transformation and enterprise IT to enhance government operations. Unlike many suppliers, Agile Defense emphasizes a government-focused portfolio with a multidimensional VSOC and AI-driven workforce upgrades, positioning itself to meet federal security and modernization needs. The goal is to help federal agencies protect data and systems, modernize IT infrastructure, and improve cyber resilience across national security and civilian missions.

Company size
1,001-5,000
Company stage
Acquired
Total funding
Not listed
Headquarters
Reston, VA
Founded
1998

Recently Posted Jobs

Explore more opportunities at Agile Defense

See more jobs