Cyber Threat Intelligence III
for each heading. Use - for any list of duties/requirements/benefits. Use
for prose. Do NOT repeat job title as heading. Do NOT put Job ID/requisition numbers as headings. Remove boilerplate: cookie/navigation/legal/EEO/equal-opportunity/scam-warning, duplicated lines, application instructions. Preserve all substantive info. Include a section only when posting has real specific content for it. Avoid filler like "commensurate with experience". Pay: we have salary range $74,500 - $113,500. So we can include Pay section with that. Schedule: we have mention of "9/80 work schedule" in Benefits. Also maybe schedule info: "9/80 work schedule". Could be part of Benefits. But we can also have Schedule section if there is explicit schedule info. The posting says: "Benefits: AV offers an excellent benefits package including medical, dental vision, 401K with company matching, a 9/80 work schedule and a paid holiday shutdown." So schedule is part of benefits. We could still create a Schedule section with that detail, but we should avoid duplication. The instruction: Prefer a few substantive sections over many thin ones. So we can include Benefits section that includes medical, dental, vision, 401K, 9/80 schedule, paid holiday shutdown. Pay section separate.
We need sections: About the role (summary), Responsibilities, Requirements (maybe Basic Qualifications), Qualifications (Other Qualifications & Desired Competencies), Skills (Key Competencies maybe), Benefits, Pay. Schedule maybe not needed separate.
We must not include headings with filler. Ensure we include all substantive info.
Let's extract content.
Summary: "Worker Type Regular Summary Job Description The Cyber Threat Intelligence (CTI) Analyst is responsible for identifying, analyzing, and communicating cyber threats that may impact the organization, its employees, systems, data, and business operations. This role combines traditional threat intelligence analysis with strong technical cybersecurity aptitude to ensure intelligence is actionable and can be translated into detections, investigations, vulnerability prioritization, and defensive security improvements. The ideal candidate understands threat actors and geopolitical or industry-specific threats while also possessing hands-on familiarity with security technologies, endpoint and network telemetry, SIEM/XDR platforms, vulnerability data, and common attacker techniques."
We can put that in About the role section as
.
Responsibilities: list of duties broken into sub-sections: Cyber Threat Intelligence, Technical Threat Analysis, Vulnerability & Exposure Intelligence, Incident Response Support, Threat Intelligence Platform & Data Management. Each has bullet-like sentences. We'll create a
with - for each responsibility bullet. Could also keep subheadings but not required; we can just list.
Requirements: Basic Qualifications (Required Skills & Experience). We'll list each qualification as
- .
Other Qualifications & Desired Competencies: list as
- maybe under Qualifications section.
Skills: Key Competencies list.
Benefits: list benefits.
Pay: salary range.
We must not include boilerplate like "Physical Demands", "Clearance Level", "ITAR Requirement", etc. Those are substantive? They might be considered relevant but maybe not required to include? The instruction says preserve ALL substantive information; do NOT invent or summarize away detail. So we should include Physical Demands, Clearance Level, ITAR Requirement as they are substantive. However they might be considered boilerplate? They are specific to the job. The instruction says remove cookie/navigation/legal/EEO/equal-opportunity/scam-warning boilerplate, duplicated lines, and application instructions. Physical Demands, Clearance Level, ITAR Requirement are not those. So we should include them. But we have no specific headings for them; we could include them under a section like "Additional Information" but we only allowed headings from list. We could incorporate them into Responsibilities or Requirements? Better to create a section like "Additional Details" but not allowed headings. The allowed headings are fixed: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. We could put Physical Demands, Clearance Level, ITAR Requirement under Requirements or Qualifications? They are not exactly qualifications. Could be under Requirements as "Other Requirements". But we need to preserve all substantive info; we can embed them as
paragraphs under appropriate sections.
We also have "Principals only need apply. NO agencies please." That's application instruction; should be removed.
Also "About AV" section is company description; could be considered substantive but maybe not required? It's about the company; could be considered boilerplate? It's not navigation/legal/EEO. It's substantive about the employer. Might be okay to include under About the role? But About the role is for the role, not company. However we could include it as part of About the role? Might be stretching. The instruction: Preserve ALL substantive information; do NOT invent or summarize away detail. So we should include the company description somewhere. Could add a section "About the Company" but not allowed headings. Could incorporate into About the role as a paragraph after role description? Might be okay.
But we need to follow the allowed headings list; we cannot add new headings. So we must fit all content under those headings.
Let's map:
- About the role: role summary + maybe company description? Could include both.
- Responsibilities: list of duties.
- Requirements: Basic Qualifications (Required Skills & Experience) + Physical Demands, Clearance Level, ITAR Requirement? Could be separate but we can add as list items under Requirements.
- Qualifications: Other Qualifications & Desired Competencies + Certifications.
- Skills: Key Competencies.
- Benefits: benefits list.
- Pay: salary range.
- Schedule: maybe we can include 9/80 work schedule here, but it's already in Benefits. Could still include schedule separate but risk duplication. Since we prefer few substantive sections, we can omit Schedule section if schedule info is covered in Benefits. The instruction: include a section ONLY when the posting has real, specific content for it — never emit a heading followed by filler/placeholder text. So if we put Schedule but no specific content besides what's already in Benefits, that might be considered filler. Better to omit Schedule.
Thus we will output sections: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay.
Now craft HTML.
We need to use
for each section heading.
Inside each, use
for prose,
- for lists.
We must not repeat job title as heading. Not include Job ID.
Let's extract details precisely.
About the role prose: combine summary and maybe company description.
Summary: "The Cyber Threat Intelligence (CTI) Analyst is responsible for identifying, analyzing, and communicating cyber threats that may impact the organization, its employees, systems, data, and business operations. This role combines traditional threat intelligence analysis with strong technical cybersecurity aptitude to ensure intelligence is actionable and can be translated into detections, investigations, vulnerability prioritization, and defensive security improvements. The ideal candidate understands threat actors and geopolitical or industry-specific threats while also possessing hands-on familiarity with security technologies, endpoint and network telemetry, SIEM/XDR platforms, vulnerability data, and common attacker techniques."
Company description (About AV): "AV isn’t for everyone. We hire the curious, the relentless, the mission-obsessed. The best of the best. We don’t just build defense technology—we redefine what’s possible. As the premier autonomous systems company in the U.S., AV delivers breakthrough capabilities across air, land, sea, space, and cyber. From AI-powered drones and loitering munitions to integrated autonomy and space resilience, our technologies shape the future of warfare and protect those who serve. Founded by legendary innovator Dr. Paul MacCready, AV has spent over 50 years pushing the boundaries of what unmanned systems can do. Our heritage includes seven platforms in the Smithsonian—but we’re not building history, we’re building what’s next. If you're ready to build technology that matters—with speed, scale, and purpose—there’s no better place to do it than AV. We are proud to be an EEO/AA Equal Opportunity Employer, including disability/veterans. AeroVironment, Inc. is an Equal Employment Opportunity (EEO) employer and welcomes all qualified applicants. Qualified applicants will receive fair and impartial consideration without regard to race, sex, color, religion, national origin, age, disability, protected veteran status, genetic data, sexual orientation, gender identity or other legally protected status."
But note EEO statement is boilerplate? It's equal opportunity; instruction says remove EEO/equal-opportunity/scam-warning boilerplate. So we should remove that EEO statement. Also "We are proud to be an EEO/AA Equal Opportunity Employer, including disability/veterans." That's EEO boilerplate; remove. Also the later EEO statement is also boilerplate. So we should strip those. Keep the rest of company description that is not EEO.
Thus company description without EEO: "AV isn’t for everyone. We hire the curious, the relentless, the mission-obsessed. The best of the best. We don’t just build defense technology—we redefine what’s possible. As the premier autonomous systems company in the U.S., AV delivers breakthrough capabilities across air, land, sea, space, and cyber. From AI-powered drones and loitering munitions to integrated autonomy and space resilience, our technologies shape the future of warfare and protect those who serve. Founded by legendary innovator Dr. Paul MacCready, AV has spent over 50 years pushing the boundaries of what unmanned systems can do. Our heritage includes seven platforms in the Smithsonian—but we’re not building history, we’re building what’s next. If you're ready to build technology that matters—with speed, scale, and purpose—there’s no better place to do it than AV."
We can include that as a paragraph after role summary.
Now Responsibilities: list each bullet.
From posting:
Cyber Threat Intelligence:
- Monitor and analyze cyber threat intelligence from commercial, government, open-source, and internal sources.
- Identify emerging threat actors, campaigns, malware, vulnerabilities, tactics, techniques, and procedures (TTPs) relevant to the organization.
- Develop intelligence assessments covering strategic, operational, and tactical cyber threats.
- Maintain threat actor profiles, indicators of compromise (IOCs), TTPs, and intelligence requirements.
- Analyze threats using frameworks such as MITRE ATT&CK and the Cyber Kill Chain.
- Produce executive-level intelligence reports, technical threat reports, alerts, and briefings.
- Evaluate the credibility, relevance, and confidence level of intelligence before dissemination.
- Track threats targeting the organization's industry, technology stack, supply chain, and critical business operations.
Technical Threat Analysis:
- Analyze endpoint, network, identity, cloud, email, and security telemetry to validate threat intelligence.
- Use SIEM/XDR platforms to investigate IOCs, suspicious activity, and threat actor behaviors.
- Perform threat hunting based on intelligence-derived hypotheses and known adversary TTPs.
- Develop and execute searches using technologies such as KQL, XQL, SPL, or similar query languages.
- Analyze IP addresses, domains, URLs, file hashes, certificates, processes, command lines, and other technical indicators.
- Understand common Windows, Linux, network, Active Directory/Entra ID, cloud, and endpoint attack techniques.
- Work with SOC and security engineering teams to translate intelligence into actionable detections and security controls.
- Assist with developing detection logic, watchlists, blocklists, threat-hunting queries, and alerting rules.
Vulnerability & Exposure Intelligence:
- Monitor emerging vulnerabilities, zero-day vulnerabilities, exploitation activity, and threat actor targeting.
- Correlate vulnerability intelligence with the organization's technology and asset inventory.
- Assist vulnerability management teams with risk-based vulnerability prioritization based on active exploitation, threat intelligence,
for prose. Do NOT repeat job title as heading. Do NOT put Job ID/requisition numbers as headings. Remove boilerplate: cookie/navigation/legal/EEO/equal-opportunity/scam-warning, duplicated lines, application instructions. Preserve all substantive info. Include a section only when posting has real specific content for it. Avoid filler like "commensurate with experience". Pay: we have salary range $74,500 - $113,500. So we can include Pay section with that. Schedule: we have mention of "9/80 work schedule" in Benefits. Also maybe schedule info: "9/80 work schedule". Could be part of Benefits. But we can also have Schedule section if there is explicit schedule info. The posting says: "Benefits: AV offers an excellent benefits package including medical, dental vision, 401K with company matching, a 9/80 work schedule and a paid holiday shutdown." So schedule is part of benefits. We could still create a Schedule section with that detail, but we should avoid duplication. The instruction: Prefer a few substantive sections over many thin ones. So we can include Benefits section that includes medical, dental, vision, 401K, 9/80 schedule, paid holiday shutdown. Pay section separate. We need sections: About the role (summary), Responsibilities, Requirements (maybe Basic Qualifications), Qualifications (Other Qualifications & Desired Competencies), Skills (Key Competencies maybe), Benefits, Pay. Schedule maybe not needed separate. We must not include headings with filler. Ensure we include all substantive info. Let's extract content. Summary: "Worker Type Regular Summary Job Description The Cyber Threat Intelligence (CTI) Analyst is responsible for identifying, analyzing, and communicating cyber threats that may impact the organization, its employees, systems, data, and business operations. This role combines traditional threat intelligence analysis with strong technical cybersecurity aptitude to ensure intelligence is actionable and can be translated into detections, investigations, vulnerability prioritization, and defensive security improvements. The ideal candidate understands threat actors and geopolitical or industry-specific threats while also possessing hands-on familiarity with security technologies, endpoint and network telemetry, SIEM/XDR platforms, vulnerability data, and common attacker techniques." We can put that in About the role section as
. Responsibilities: list of duties broken into sub-sections: Cyber Threat Intelligence, Technical Threat Analysis, Vulnerability & Exposure Intelligence, Incident Response Support, Threat Intelligence Platform & Data Management. Each has bullet-like sentences. We'll create a
- with
- for each responsibility bullet. Could also keep subheadings but not required; we can just list. Requirements: Basic Qualifications (Required Skills & Experience). We'll list each qualification as
- . Other Qualifications & Desired Competencies: list as
- maybe under Qualifications section.
Skills: Key Competencies list.
Benefits: list benefits.
Pay: salary range.
We must not include boilerplate like "Physical Demands", "Clearance Level", "ITAR Requirement", etc. Those are substantive? They might be considered relevant but maybe not required to include? The instruction says preserve ALL substantive information; do NOT invent or summarize away detail. So we should include Physical Demands, Clearance Level, ITAR Requirement as they are substantive. However they might be considered boilerplate? They are specific to the job. The instruction says remove cookie/navigation/legal/EEO/equal-opportunity/scam-warning boilerplate, duplicated lines, and application instructions. Physical Demands, Clearance Level, ITAR Requirement are not those. So we should include them. But we have no specific headings for them; we could include them under a section like "Additional Information" but we only allowed headings from list. We could incorporate them into Responsibilities or Requirements? Better to create a section like "Additional Details" but not allowed headings. The allowed headings are fixed: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. We could put Physical Demands, Clearance Level, ITAR Requirement under Requirements or Qualifications? They are not exactly qualifications. Could be under Requirements as "Other Requirements". But we need to preserve all substantive info; we can embed them as
paragraphs under appropriate sections. We also have "Principals only need apply. NO agencies please." That's application instruction; should be removed. Also "About AV" section is company description; could be considered substantive but maybe not required? It's about the company; could be considered boilerplate? It's not navigation/legal/EEO. It's substantive about the employer. Might be okay to include under About the role? But About the role is for the role, not company. However we could include it as part of About the role? Might be stretching. The instruction: Preserve ALL substantive information; do NOT invent or summarize away detail. So we should include the company description somewhere. Could add a section "About the Company" but not allowed headings. Could incorporate into About the role as a paragraph after role description? Might be okay. But we need to follow the allowed headings list; we cannot add new headings. So we must fit all content under those headings. Let's map: - About the role: role summary + maybe company description? Could include both. - Responsibilities: list of duties. - Requirements: Basic Qualifications (Required Skills & Experience) + Physical Demands, Clearance Level, ITAR Requirement? Could be separate but we can add as list items under Requirements. - Qualifications: Other Qualifications & Desired Competencies + Certifications. - Skills: Key Competencies. - Benefits: benefits list. - Pay: salary range. - Schedule: maybe we can include 9/80 work schedule here, but it's already in Benefits. Could still include schedule separate but risk duplication. Since we prefer few substantive sections, we can omit Schedule section if schedule info is covered in Benefits. The instruction: include a section ONLY when the posting has real, specific content for it — never emit a heading followed by filler/placeholder text. So if we put Schedule but no specific content besides what's already in Benefits, that might be considered filler. Better to omit Schedule. Thus we will output sections: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay. Now craft HTML. We need to use
for each section heading. Inside each, use
for prose,
- for lists. We must not repeat job title as heading. Not include Job ID. Let's extract details precisely. About the role prose: combine summary and maybe company description. Summary: "The Cyber Threat Intelligence (CTI) Analyst is responsible for identifying, analyzing, and communicating cyber threats that may impact the organization, its employees, systems, data, and business operations. This role combines traditional threat intelligence analysis with strong technical cybersecurity aptitude to ensure intelligence is actionable and can be translated into detections, investigations, vulnerability prioritization, and defensive security improvements. The ideal candidate understands threat actors and geopolitical or industry-specific threats while also possessing hands-on familiarity with security technologies, endpoint and network telemetry, SIEM/XDR platforms, vulnerability data, and common attacker techniques." Company description (About AV): "AV isn’t for everyone. We hire the curious, the relentless, the mission-obsessed. The best of the best. We don’t just build defense technology—we redefine what’s possible. As the premier autonomous systems company in the U.S., AV delivers breakthrough capabilities across air, land, sea, space, and cyber. From AI-powered drones and loitering munitions to integrated autonomy and space resilience, our technologies shape the future of warfare and protect those who serve. Founded by legendary innovator Dr. Paul MacCready, AV has spent over 50 years pushing the boundaries of what unmanned systems can do. Our heritage includes seven platforms in the Smithsonian—but we’re not building history, we’re building what’s next. If you're ready to build technology that matters—with speed, scale, and purpose—there’s no better place to do it than AV. We are proud to be an EEO/AA Equal Opportunity Employer, including disability/veterans. AeroVironment, Inc. is an Equal Employment Opportunity (EEO) employer and welcomes all qualified applicants. Qualified applicants will receive fair and impartial consideration without regard to race, sex, color, religion, national origin, age, disability, protected veteran status, genetic data, sexual orientation, gender identity or other legally protected status." But note EEO statement is boilerplate? It's equal opportunity; instruction says remove EEO/equal-opportunity/scam-warning boilerplate. So we should remove that EEO statement. Also "We are proud to be an EEO/AA Equal Opportunity Employer, including disability/veterans." That's EEO boilerplate; remove. Also the later EEO statement is also boilerplate. So we should strip those. Keep the rest of company description that is not EEO. Thus company description without EEO: "AV isn’t for everyone. We hire the curious, the relentless, the mission-obsessed. The best of the best. We don’t just build defense technology—we redefine what’s possible. As the premier autonomous systems company in the U.S., AV delivers breakthrough capabilities across air, land, sea, space, and cyber. From AI-powered drones and loitering munitions to integrated autonomy and space resilience, our technologies shape the future of warfare and protect those who serve. Founded by legendary innovator Dr. Paul MacCready, AV has spent over 50 years pushing the boundaries of what unmanned systems can do. Our heritage includes seven platforms in the Smithsonian—but we’re not building history, we’re building what’s next. If you're ready to build technology that matters—with speed, scale, and purpose—there’s no better place to do it than AV." We can include that as a paragraph after role summary. Now Responsibilities: list each bullet. From posting: Cyber Threat Intelligence: - Monitor and analyze cyber threat intelligence from commercial, government, open-source, and internal sources. - Identify emerging threat actors, campaigns, malware, vulnerabilities, tactics, techniques, and procedures (TTPs) relevant to the organization. - Develop intelligence assessments covering strategic, operational, and tactical cyber threats. - Maintain threat actor profiles, indicators of compromise (IOCs), TTPs, and intelligence requirements. - Analyze threats using frameworks such as MITRE ATT&CK and the Cyber Kill Chain. - Produce executive-level intelligence reports, technical threat reports, alerts, and briefings. - Evaluate the credibility, relevance, and confidence level of intelligence before dissemination. - Track threats targeting the organization's industry, technology stack, supply chain, and critical business operations. Technical Threat Analysis: - Analyze endpoint, network, identity, cloud, email, and security telemetry to validate threat intelligence. - Use SIEM/XDR platforms to investigate IOCs, suspicious activity, and threat actor behaviors. - Perform threat hunting based on intelligence-derived hypotheses and known adversary TTPs. - Develop and execute searches using technologies such as KQL, XQL, SPL, or similar query languages. - Analyze IP addresses, domains, URLs, file hashes, certificates, processes, command lines, and other technical indicators. - Understand common Windows, Linux, network, Active Directory/Entra ID, cloud, and endpoint attack techniques. - Work with SOC and security engineering teams to translate intelligence into actionable detections and security controls. - Assist with developing detection logic, watchlists, blocklists, threat-hunting queries, and alerting rules. Vulnerability & Exposure Intelligence: - Monitor emerging vulnerabilities, zero-day vulnerabilities, exploitation activity, and threat actor targeting. - Correlate vulnerability intelligence with the organization's technology and asset inventory. - Assist vulnerability management teams with risk-based vulnerability prioritization based on active exploitation, threat intelligence,