Cyber Threat Intel Analyst

## Company Overview By Light Professional IT Services LLC readies warfighters and federal agencies with technology and systems engineered to connect, protect, and prepare individuals and teams for whatever comes next. Headquartered in McLean, VA, By Light supports defense, civilian, and commercial IT customers worldwide. Cole Engineering Services (CESI), a By Light company, is recognized as a premier provider of modeling and simulation (M&S) training solutions to the Federal Government and industry. Since 2004, CESI has been at the forefront of developing, maintaining, and integrating simulation-based training, serious gaming, technical services, training and other support in live, virtual, constructive, and gaming (LVCG) domains. CESI also designs, builds and runs infrastructure, platforms, applications and processes that enable cyber training for the integrated multi-domain force. Our vision is to become a worldwide full spectrum LVCG and cyber training/analysis developer, integrator and services provider. ## Position Overview The Cyber Threat Intelligence Analyst will provide direct support to the Plans and Exercise Lead for the Joint Cyber Training Enterprise, one of the largest cyber training and operations platforms in the world. The incumbent will enable project teams by supporting the planning, development, and execution of cybersecurity training and testing events through the creation of realistic, intelligence-driven training scenarios. The Cyber Threat Intelligence Analyst will research and analyze emerging cyber threats, adversary tactics, techniques, and procedures (TTPs), and operational trends to develop threat-informed exercise content, intelligence products, and Master Scenario Event List (MSEL) injects that support training objectives. The incumbent will collaborate closely with White Cell, Red Cell, and exercise planning personnel to ensure scenarios accurately reflect current threat environments and operational challenges faced by Cyber Mission Force teams. The position will also support after-action reviews, lessons learned efforts, and customer engagements to align intelligence products with evolving training requirements. This position requires strong analytical and research skills, experience with cyber threat intelligence methodologies, and the ability to effectively communicate findings through written products and presentations. Position location is Fort Meade, MD and is full time on-site. ## Responsibilities - Support the planning and execution of cybersecurity training and testing events within cyber ranges. - Research, analyze, and develop intelligence-driven scenarios, adversary TTPs, and threat-informed injects to support cyber training objectives and exercise realism. - Support the development and implementation of cyber range content, including virtual machines, networks, hardware-in-the-loop systems, training materials, applications, and exercise scenarios aligned with current threat activity. - Provide customer-facing intelligence support during exercise planning and execution, including the development of visual products, threat briefings, and priority tracking for small to large-scale multinational cyber exercises. - Develop intelligence products and scenario materials that replicate current and emerging cyber threats, adversary campaigns, and operational environments relevant to Cyber Mission Force training. - Collaborate with exercise planners, content developers, range engineers, and operational stakeholders to integrate threat intelligence into exercise design, range development, and execution activities. - Support the development, testing, documentation, fielding, and sustainment of cyber training content, intelligence products, and supporting IT training systems. - Contribute to exercise after-action reviews, lessons learned efforts, and intelligence assessments to improve future training events and operational realism. - Ensure the highest quality of task completion while meeting c…