Cyber Threat Intelligence III

for prose. Do NOT repeat job title as heading. Do NOT put Job ID / requisition numbers as headings. Preserve all substantive info. Remove boilerplate: cookie/navigation/legal/EEO/equal-opportunity/scam-warning, duplicated lines, application instructions. Include a section only when posting has real specific content for it. Never emit heading with filler placeholder text like "commensurate with experience", "not specified", "N/A", "varies", "TBD". Never create Pay/Schedule/Benefits sections unless posting actually states them. We have content: Salary range: $74,500 - $113,500. Benefits: AV offers an excellent benefits package including medical, dental vision, 401K with company matching, a 9/80 work schedule and a paid holiday shutdown. Also mention "For more information about our company benefit offerings please visit: http://www.avinc.com/myavbenefits." Also "We also encourage you to review our company website at http://www.avinc.com to learn more about us." That's maybe not needed but could be considered boilerplate? It's about benefits info link; we can keep as part of Benefits section maybe. We have "Physical Demands Ability to work in an office environment (Constant)Required to sit and stand for long periods; talk, hear, and use hands and fingers to operate a computer and telephone keyboard (Frequent)". That's maybe not a required section; we could include under "Requirements" maybe? But not a standard heading; we could include as a paragraph under "Requirements" or "Other". However guidelines: Use headings only for those listed; we can create sections like Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. We have Pay (salary range). We have Benefits (benefits). We have Schedule? The benefits mention "a 9/80 work schedule". That's schedule info. So we could include Schedule section referencing 9/80 work schedule and paid holiday shutdown maybe. But guidelines: never create Schedule section unless posting actually states them. It does mention 9/80 work schedule, which is a schedule. So we can include Schedule. We have "Clearance Level No Clearance". That's maybe metadata; we could fold into a short p or drop. It's not a heading. We'll include maybe under Requirements? But it's not a qualification. Could be a short p under "Other". But we can just include as a paragraph under "Requirements" or maybe under "Qualifications". However guidelines: do not put Job ID/requisition numbers as headings; fold minor metadata into a short p or drop it. So we can include a short p for "Clearance Level: No Clearance". Also "ITAR Requirement" etc. That's also metadata; we could include as a short p. We need to preserve all substantive information. So we need to include the ITAR requirement details, maybe as a paragraph under a section like "Requirements" or separate? There's no heading for that; we can just include as a paragraph after other sections. We need to remove EEO/equal-opportunity boilerplate, duplicated lines, application instructions. The posting includes a lot of EEO statements at the end; we should remove those. Also "Principals only need apply. NO agencies please." That's application instruction; remove. Also "For more information about our company benefit offerings please visit: ..." That's maybe okay to keep as part of Benefits? It's a link; we could keep as a paragraph. Also "We also encourage you to review our company website at http://www.avinc.com to learn more about us." That's maybe boilerplate; could remove as it's not substantive? It's about company info; maybe we can keep but it's not required. Safer to remove as it's generic. Also "About AV" section is a description of company; could be considered boilerplate? It's substantive about the company; but guidelines: remove cookie/navigation/legal/EEO/equal-opportunity/scam-warning boilerplate, duplicated lines, and application instructions. "About AV" is not those; it's company description. Might be considered substantive? It's not required but we could keep as a paragraph under maybe "About the role"? Actually "About the role" is a heading we could use for summary of role. The posting already has a "Worker Type Regular Summary Job Description" then a paragraph describing role. That could be used for "About the role". We'll create an

About the role

list of duties. Each duty could be a
• . We need to preserve all substantive information; we can break each sentence into list items. Requirements: Basic Qualifications (Required Skills & Experience) list. We'll put under

  Requirements

  with
  . Other Qualifications & Desired Competencies: could be under

  Qualifications

  or

  Skills

  . The guidelines list headings: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. So we have both Qualifications and Skills. We could put "Other Qualifications & Desired Competencies" under Qualifications. And "Certifications" maybe under Qualifications as well. Or we could put certifications under Skills? Better: Qualifications for required, Skills for desired/competencies. But we have both required and desired. We'll put required under Requirements, desired under Qualifications (or Skills). The "Key Competencies" list could be under Skills. We have "What Success Looks Like" paragraph; could be under About the role or maybe a separate section? Not in headings list; we could incorporate into About the role as additional paragraph. We have "Physical Demands" etc. Could be under Requirements as a note. We have "Clearance Level No Clearance" and ITAR requirement; we can put under Requirements as notes. We have Benefits: medical, dental vision, 401K with company matching, a 9/80 work schedule and a paid holiday shutdown. Also link for more info. We'll put under Benefits. Pay: Salary range $74,500 - $113,500. We'll put under Pay. Schedule: 9/80 work schedule mentioned; also paid holiday shutdown maybe. We'll put under Schedule. We must not create sections with filler placeholder text. All sections have real content. We must output only HTML fragment, no /, no markdown fences. Let's craft. Structure:

  About the role

  ...

  Responsibilities

  • ...
  ...

  Requirements

  • ...
  ...
  Maybe also include a paragraph for clearance and ITAR under Requirements as separate

  after list.

  Qualifications

  • ...
  ...

  Skills

  • ...
  ...

  Benefits

  • ...
  ...

  Pay

  $74,500 - $113,500

  Schedule

  9/80 work schedule; paid holiday shutdown.

  We need to ensure we don't duplicate content. Let's extract details. About the role paragraph: The posting begins: "Worker Type Regular Summary Job Description The Cyber Threat Intelligence (CTI) Analyst is responsible for identifying, analyzing, and communicating cyber threats that may impact the organization, its employees, systems, data, and business operations. This role combines traditional threat intelligence analysis with strong technical cybersecurity aptitude to ensure intelligence is actionable and can be translated into detections, investigations, vulnerability prioritization, and defensive security improvements. The ideal candidate understands threat actors and geopolitical or industry-specific threats while also possessing hands-on familiarity with security technologies, endpoint and network telemetry, SIEM/XDR platforms, vulnerability data, and common attacker techniques." We'll use that as About the role. Responsibilities: We have sections: Cyber Threat Intelligence: - Monitor and analyze cyber threat intelligence from commercial, government, open-source, and internal sources. - Identify emerging threat actors, campaigns, malware, vulnerabilities, tactics, techniques, and procedures (TTPs) relevant to the organization. - Develop intelligence assessments covering strategic, operational, and tactical cyber threats. - Maintain threat actor profiles, indicators of compromise (IOCs), TTPs, and intelligence requirements. - Analyze threats using frameworks such as MITRE ATT&CK and the Cyber Kill Chain. - Produce executive-level intelligence reports, technical threat reports, alerts, and briefings. - Evaluate the credibility, relevance, and confidence level of intelligence before dissemination. - Track threats targeting the organization's industry, technology stack, supply chain, and critical business operations. Technical Threat Analysis: - Analyze endpoint, network, identity, cloud, email, and security telemetry to validate threat intelligence. - Use SIEM/XDR platforms to investigate IOCs, suspicious activity, and threat actor behaviors. - Perform threat hunting based on intelligence-derived hypotheses and known adversary TTPs. - Develop and execute searches using technologies such as KQL, XQL, SPL, or similar query languages. - Analyze IP addresses, domains, URLs, file hashes, certificates, processes, command lines, and other technical indicators. - Understand common Windows, Linux, network, Active Directory/Entra ID, cloud, and endpoint attack techniques. - Work with SOC and security engineering teams to translate intelligence into actionable detections and security controls. - Assist with developing detection logic, watchlists, blocklists, threat-hunting queries, and alerting rules. Vulnerability & Exposure Intelligence: - Monitor emerging vulnerabilities, zero-day vulnerabilities, exploitation activity, and threat actor targeting. - Correlate vulnerability intelligence with the organization's technology and asset inventory. - Assist vulnerability management teams with risk-based vulnerability prioritization based on active exploitation, threat intelligence, asset criticality, and business impact. - Monitor sources such as CISA KEV, vendor advisories, security researchers, and commercial intelligence providers. - Evaluate whether newly disclosed vulnerabilities represent an immediate threat to the organization. Incident Response Support: - Provide threat intelligence support during cybersecurity incidents. - Research suspected threat actors, malware, infrastructure, and attack techniques during active investigations. - Enrich security alerts and incidents with relevant threat intelligence. - Identify related infrastructure, IOCs, TTPs, and historical activity. - Support incident scoping and attribution where appropriate. - Document intelligence findings and provide recommendations to incident commanders and security leadership. Threat Intelligence Platform & Data Management: - Maintain and improve threat intelligence platforms, feeds, integrations, and intelligence repositories. - Evaluate intelligence feeds for accuracy, duplication, relevance, and operational value. - Integrate threat intelligence with SIEM, XDR, SOAR, EDR, vulnerability management, and other security platforms. - Support automation of IOC ingestion, enrichment, correlation, and response workflows. - Continuously improve the organization's intelligence collection requirements and processes. We'll list each bullet as
  • . Requirements (Basic Qualifications): - Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Intelligence Studies, or a related discipline, or equivalent professional experience. - 3+ years of cybersecurity, threat intelligence, SOC, incident response, threat hunting, or related experience. - Strong understanding of cyber threat intelligence principles and intelligence lifecycle processes. - Strong