{"id":2443508,"url":"https://alion.io/job/phoenix-cyber-threat-intelligence-analyst-phoenix-cyber","title":"Threat Intelligence Analyst - Phoenix Cyber","company":{"id":3075984,"name":"Phoenix Cyber","domain":"phoenixcyber.com","url":"https://alion.io/company/phoenixcyber","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"JazzHR","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Washington, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":110000,"max_usd":212000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":1306},"experience_years_min":6,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Cyber Kill Chain","optional":false},{"name":"MITRE ATT&CK","optional":false}],"status":"live","first_seen_at":"2026-10-13T12:49:08Z","employer_posted_date":"2026-10-13","last_verified_at":"2026-10-21T18:52:50Z","board_verified":true,"closed_at":null,"days_open":8,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":8},"description":"Phoenix Cyber is looking for a Threat Intelligence Analyst, with Operational Technology (OT) focus, to join our client delivery team.\nJob Description:\nCollects, reviews, and identifies cybersecurity threat intelligence from open source and intelligence reporting to analyze and provide actionable threat reporting and briefings for cybersecurity analysts.\nProvides support to content developers and cybersecurity engineers in identifying gaps in protection and detection of systems.\nReviews log and network events and alerts related to systems for signs of attack or Advanced Persistent Threats.\nPerforms root cause analysis and supports remediation efforts for incidents related to Operational Technology cybersecurity incidents. \nActs as the Subject Matter Expert on OT cybersecurity related issues.\n Requirements:Minimum 6 years of relevant IT experience \nMinimum 2 years of hands-on experience analyzing, securing, or threat-modeling Operational Technology (OT), Industrial Control Systems (ICS), or SCADA environments (Experience limited to enterprise IT security will not satisfy this requirement.)\nWorking understanding of common industrial communication protocols and lower-level control architecture.\nDemonstrated experience applying ATT&CK for ICS, SPARTA, or Cyber Kill Chain for ICS to dissect adversary campaigns and analyze cyber-physical attack paths.\nUnderstanding of the NIST Framework \nUnderstanding of threats and vulnerabilities in OT environments. \nMust have an active Top Secret Security Clearance \nPhoenix Cyber is a national provider of cybersecurity engineering services, operations services, sustainment services and managed security services to organizations determined to strengthen their security posture and enhance the processes and technology used by their security operations team.\nPhoenix Cyber is an equal opportunity employer and complies with Executive Order 11246, Section 503 of the Rehabilitation Act of 1973, the Vietnam Era Veteran's Readjustment Assistance Act (VEVRAA), all amendments to these regulations, and applicable executive orders, federal, and state regulations. Applicants are considered without attention to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, and/or veteran status.\nPhoenix Cyber participates in E-Verify to confirm the employment eligibility of all newly-hired employees. To learn more about E-Verify, including your rights and responsibilities, go to https://www.e-verify.gov/","description_format":"text","description_chars":2492,"description_truncated":false,"requirements":{"experience_years_min":6,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":true,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Threat Intelligence","Information Security"],"lifecycle":[{"event":"open","at":"2026-10-13T12:49:08Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":7,"expected_fill_days":37,"reasons":["conf:3","velocity","win:early"],"computed_at":"2026-10-21T05:46:15Z"},"pay":null,"html_url":"https://alion.io/job/phoenix-cyber-threat-intelligence-analyst-phoenix-cyber","json_url":"https://alion.io/job/phoenix-cyber-threat-intelligence-analyst-phoenix-cyber.json","meta":{"generated_at":"2026-10-21T21:41:07Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":30886,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-22T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3075984},"rest":"https://alion.io/mcp/rest/get_company?id=3075984"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fphoenix-cyber-threat-intelligence-analyst-phoenix-cyber"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fphoenix-cyber-threat-intelligence-analyst-phoenix-cyber"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fphoenix-cyber-threat-intelligence-analyst-phoenix-cyber"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/phoenix-cyber-threat-intelligence-analyst-phoenix-cyber\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fphoenix-cyber-threat-intelligence-analyst-phoenix-cyber"}]}