{"id":3718009,"url":"https://alion.io/job/general-dynamics-information-technology-cyber-threat-intelligence-analyst-iii","title":"Cyber Threat Intelligence Analyst III","company":{"id":4418,"name":"General Dynamics Information Technology","domain":"gdit.com","url":"https://alion.io/company/gdit","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":95,"open_postings":51,"ghost_share":0,"stale_share":0.176,"repost_share":0.059,"time_to_fill_p50_days":37,"computed_at":"2026-11-11T05:49:22Z"}},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Washington, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":123250,"max":166750,"currency":"USD","period":"year","gross":null,"usd_annual":166750},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Diamond Model","optional":false},{"name":"Incident Management","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"STIX","optional":false},{"name":"TAXII","optional":false}],"status":"live","first_seen_at":"2026-11-03T00:00:00Z","employer_posted_date":"2026-11-03","last_verified_at":"2026-11-11T05:52:19Z","board_verified":true,"closed_at":null,"days_open":8,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":8},"description":"Type of Requisition:\nRegularClearance Level Must Currently Possess:\nTop SecretClearance Level Must Be Able to Obtain:\nTop Secret/SCIPublic Trust/Other Required:\nNoneJob Family:\nIntelligence Operations and AnalysisJob Qualifications:\nSkills:\nCyber Operations, Cyber Threat Analysis, Cyber Threat Intelligence, Intelligence Reports, Threat MonitoringCertifications:\nNoneExperience:\n5 + years of related experienceUS Citizenship Required:\nYesJob Description:\nPosition Summary\nThe Cyber Threat Intelligence Analyst III produces timely, accurate threat intelligence that supports a DHS agency's national cyber operations. The analyst fuses classified and unclassified intelligence, open-source, law enforcement, and partner reporting into products that help leaders and operators understand who is acting, how, and what is at risk.\nThe analyst works closely with watch floor, incident management, and hunt and response teams, adding threat context to active incidents and keeping leadership informed through regular and short-turn products.\nKey Responsibilities\nThreat Monitoring & Analysis\nContinuously monitor intelligence, open-source, media, law enforcement, and partner reporting.\nAnalyze threat actors, campaigns, and tactics, techniques, and procedures, and map them to MITRE ATT&CK.\nAssess relevance of threats to federal, state, local, tribal, territorial, and critical infrastructure partners.\nApply structured analytic techniques and clearly state confidence and sourcing.\nIntelligence Products & Leadership Support\nProduce weekly and monthly intelligence updates, leadership notes, threat summaries, and rapid briefings.\nContribute threat content to alerts, advisories, and partner communications.\nFollow classification review and downgrade procedures so products can be shared at the right level.\nAlign products to the agency's existing critical information requirements and essential elements of information.\nIncident & Operations Support\nProvide threat context to triage and incident management, including indicators and actor attribution where supported.\nGive hunt and response teams leads drawn from intelligence reporting.\nSupport surge and crisis action activities during significant incidents.\nCritical Infrastructure Context\nHelp analyze threats against critical infrastructure sectors, their dependencies, and potential consequences.\nContribute to operational and strategic reporting on critical infrastructure threats and vulnerabilities.\nTools & Data\nUse and help improve threat intelligence platforms and sharing standards such as STIX and TAXII.\nReview AI-generated summaries and enrichment for accuracy before release.\nRequired Qualifications\nBachelor's degree in Intelligence Studies, Cybersecurity, Computer Science, International Relations, or a related field, or equivalent experience.\nMinimum 5 years of experience in cyber threat intelligence analysis.\nWorking knowledge of MITRE ATT&CK, the Diamond Model, and the Cyber Kill Chain.\nExperience with threat intelligence platforms and STIX/TAXII.\nExperience writing intelligence products for senior government leaders.\nExperience working with classified intelligence reporting.\nActive Top Secret (TS) clearance.\nEligibility to obtain and maintain TS/SCI access.\nAbility to work onsite at DHS Headquarters and other agency sites in the National Capital Region. \nPreferred Qualifications\nExperience at DHS, CISA, the Intelligence Community, DoW, or FBI cyber components.\nExperience analyzing threats to critical infrastructure, including industrial control systems and operational technology.\nExperience using Palantir or other enterprise analytics platforms for intelligence analysis.\nExperience reviewing or validating AI-assisted analysis.GCTI, CTIA, or similar certifications.\nExperience applying Intelligence Community analytic and sourcing standards (ICD 203 and ICD 206).\nExperience managing intelligence requirements and requests for information, including tracking whether products met the need.\nFamiliarity with MITRE ATT&CK for ICS.\nAbility to support nights, weekends, holidays, on-call, and work at a continuity site during emergencies.\nCurrent DHS suitability (Entry on Duty) determination.\nExperience handling information under the Traffic Light Protocol and controlled unclassified information (CUI) markings.\nThe likely salary range for this position is $123,250 - $166,750. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range.Scheduled Weekly Hours:\n40Travel Required:\n10-25%Telecommuting Options:\nOnsiteWork Location:\nUSA DC WashingtonAdditional Work Locations:\nTotal Rewards at GDIT:\nOur benefits package for all US-based employees includes a variety of medical plan options, some with Health Savings Accounts, dental plan options, a vision plan, and a 401(k) plan offering the ability to contribute both pre and post-tax dollars up to the IRS annual limits and receive a company match. To encourage work/life balance, GDIT offers employees full flex work weeks where possible and a variety of paid time off plans, including vacation, sick and personal time, holidays, paid parental, military, bereavement and jury duty leave. To ensure our employees are able to protect their income, other offerings such as short and long-term disability benefits, life, accidental death and dismemberment, personal accident, critical illness and business travel and accident insurance are provided or available. We regularly review our Total Rewards package to ensure our offerings are competitive and reflect what our employees have told us they value most.Our Identity Verification Process:\nAs part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during virtual interviews. We reserve the right to take your picture to verify your identity and prevent fraud. By proceeding, you authorize the collection, processing, and use of your biometric data for identity verification and security purposes.About Our Work:\nWe are GDIT. A global technology and professional services company that delivers technology solutions and mission services to every major agency across the U.S. government, defense and intelligence community. Our 26,000 experts extract the power of technology to create immediate value and deliver solutions at the edge of innovation. We operate across 50+ countries worldwide, offering leading mission-ready capabilities in AI, cloud, cyber and software development.Join our Talent Community to stay up to date on our career opportunities and events atgdit.com/tc.\nEqual Opportunity Employer / Individuals with Disabilities / Protected Veterans","description_format":"text","description_chars":6881,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":true,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Threat Intelligence","Information Security","Government","Military"],"lifecycle":[{"event":"open","at":"2026-11-04T01:28:59Z"}],"visa":[{"country":"US","licensed_sponsor":true,"adverts_offering_sponsorship_24m":14,"sanctioned_now":false,"evidence":"H-1B filings in 12 months: 21 · green card filings: 4","filings_12m":21,"filings_prev_12m":30,"green_card_filings_12m":4,"median_offered_wage_usd":154900,"route":null,"cap_exempt":false,"checked_at":"2026-11-11T07:38:50+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)","Alion: sponsorship offered in the employer's own job adverts (24 months)"],"filings_for_role_12m":0}],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":8,"expected_fill_days":37,"reasons":["seen:8","velocity","win:early","comp:brand"],"computed_at":"2026-11-11T05:49:22Z"},"pay":{"stated_usd_annual":166750,"is_top_pay":true},"html_url":"https://alion.io/job/general-dynamics-information-technology-cyber-threat-intelligence-analyst-iii","json_url":"https://alion.io/job/general-dynamics-information-technology-cyber-threat-intelligence-analyst-iii.json","meta":{"generated_at":"2026-11-11T14:56:36Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":27710,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-12T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4418},"rest":"https://alion.io/mcp/rest/get_company?id=4418"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fgeneral-dynamics-information-technology-cyber-threat-intelligence-analyst-iii"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fgeneral-dynamics-information-technology-cyber-threat-intelligence-analyst-iii"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fgeneral-dynamics-information-technology-cyber-threat-intelligence-analyst-iii"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/general-dynamics-information-technology-cyber-threat-intelligence-analyst-iii\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fgeneral-dynamics-information-technology-cyber-threat-intelligence-analyst-iii"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3718009}},{"tool":"search_jobs","arguments":{"company":"gdit.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3718009},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}