Adversary Network Intelligence Analyst

Key Responsibilities:

• Adversary Network Mapping: Reconstruct intricate and fragmented target networks, characterizing both logical and physical topologies, IP assets, domains, cloud services, and command and control (C2) nodes from various intelligence sources.

• Vulnerability & Vector Identification: Detect entry points, vulnerable interface nodes, and structural weaknesses across hardware, modems, fiber optics, and satellite connections; assess adversary operational security (OPSEC) practices and evasion strategies.

• Multi-Source Intelligence Fusion: Integrate technical network telemetry with all-source intelligence (including OSINT, SIGINT-derived insights, and malware reports) to create thorough evaluations of adversary capabilities, intentions, and infrastructure lifecycles.

• Red C2 & Threat Profiling: Perform in-depth analyses of foreign C2 systems, organizational structures, and doctrines to assist command elements in anticipating how adversary leadership issues tactical directives.

• Finished Intelligence Production: Produce timely and precise intelligence outputs including technical assessments, briefings, network diagrams, and threat reports tailored for USMC intelligence personnel, tactical planners, and strategic leaders.

• Operational & Tradecraft Support: Collaborate with cyber operators and collection managers to aid in targeting, disruption initiatives, and collection refinement. Contribute to the advancement of analytical tradecraft, methodologies, and tools for extensive network analysis.

Minimum Qualifications:

• A Bachelor s degree along with a minimum of 3 years of relevant experience in DoD/IC network analysis or cyber threat intelligence. Alternatively, an additional 2 years of experience may be accepted in place of a degree.

• Strong technical knowledge of networking principles (OSI model, TCP/IP, DNS, TLS, cloud infrastructure) and routing protocols (BGP, OSPF, EIGRP).

• Demonstrated ability in structured intelligence analysis (link analysis, pattern recognition) in accordance with Intelligence Community Analytic Standards.

• Hands-on experience with technical research tools (passive DNS, certificate transparency, WHOIS/RDAP, and network visualization platforms).

Preferred Qualifications:

• C2 & Red System Modeling: Extensive knowledge of foreign C2 systems, military communication doctrines, and their correlation with specific intrusion sets or campaigns.

• Scripting & Data Enrichment: Familiarity with scripting languages (preferably Python) to automate data enrichment and analyze large metadata sets.

• Frameworks & Disruption: Understanding of the MITRE ATT&CK framework and experience in supporting collection management, threat hunting, or disruption operations.

• Certifications: Current industry certifications such as CompTIA (Network+, A+, ITF), GIAC Cyber Threat Intelligence (GCTI), or Certified Threat Intelligence Analyst (CTIA).

Clearance Requirements:

• Must possess a current and active Top Secret / SCI clearance.

Physical Requirements:

• Ability to remain in a stationary position for 50% of the time.

• Occasional movement within the office to access file cabinets, office equipment, etc.