
Government and Public Sector - Cybersecurity Threat Intelligence Manager
Ernst & Young Advisory Services Sdn Bhd, Mc Lean, Virginia, us, 22107
Overview
Government and Public Sector – Cybersecurity – Cyber Threat Intelligence Manager Location: McLean. Date: Feb 21, 2026. Requisition ID: 1687257. At EY, we’re all in to shape your future with confidence. We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go. Join EY and help to build a better working world. Responsibilities
As a Cyber Threat Intelligence Manager, analyze, synthesize, and disseminate actionable threat intelligence to enhance cyber defense operations. Integrate an intelligence-led perspective across security domains and collaborate with tactical security teams, including Red, Blue, and Purple Teams, as well as Risk Management, Vulnerability Management, and Incident Response teams to provide intelligence-driven decision support before, during, and after cyber incidents. Engage in threat actor profiling, infrastructure analysis, attribution efforts, forecasting, and proactive threat hunting to support the development of reactive and proactive cyber defenses. Craft and deliver clear, concise, and actionable intelligence reports for technical and executive audiences. Mentor junior analysts and contribute to the evolution of the cyber threat intelligence team by enhancing analytic tradecraft, methodology development, and operational efficiency. Engage with industry forums, conferences, and professional development opportunities to maintain a cutting-edge understanding of emerging threats and intelligence methodologies. Qualifications
Bachelor’s degree in Computer Science, Information Systems, Engineering, Business, or a related field, and 7–10 years of related work experience. Certifications: CISSP, CISM, CISA, OSCP, CEH, or SANS GIAC certifications (GCTI, GSE, GDAT, GDSA, GMON) as applicable. Demonstrated experience with intelligence standards such as STIX/TAXII, DHS TLP, ICD203 & ICD206. Strong ability to research, validate, and analyze threat data from open and closed-source feeds. Expertise in MITRE ATT&CK, intelligence tradecraft, structured analytic techniques, and cyber threat modeling. Hands-on experience with Threat Intelligence Platforms (TIPs), SIEM, SOAR, and network forensic tools. Proficient in scripting and automation (Python, PowerShell, or Bash) for intelligence enrichment and analysis. Ability to translate technical intelligence into business risk narratives for executive audiences. Experience integrating intelligence into Vulnerability Management, Incident Response, and Risk Management frameworks. Active TS/SCI clearance with polygraph eligibility; willingness to work on-site 3 days a week in the greater Washington, DC area. Note: Travel up to 20–30% may be required; some work may be completed at client, EY, and/or contractor sites. Ideally, you’ll also have
Prior consulting experience and experience with technical and strategic intelligence fusion. Strong understanding of cybercriminal underground ecosystems and cyber espionage threats. Familiarity with cloud security, monitoring, and forensics. Experience with adversary emulation, attack surface management, and deception technologies. Background in malware analysis and reverse engineering. Law enforcement, defense, or critical infrastructure threat intelligence experience. What we look for
We’re looking for intellectually curious people with a genuine passion for cybersecurity who can contribute innovative ideas and grow into a leading expert. EY offers a global scale, support, inclusive culture, and technology to help you build\u00a0an exceptional experience. What we offer
We offer a competitive compensation package with a Total Rewards program including medical/dental coverage, pension and 401(k), and a wide range of paid time off. We provide flexible vacation, EY holidays, and personal/family care leave to support well-being. We operate a hybrid model with most client-serving roles expected to work 40–60% on-site. We also provide ongoing learning and leadership development opportunities to shape your future with confidence. EY is committed to equal employment opportunities and to providing reasonable accommodations. If you need assistance applying online or require an accommodation during the application process, please contact EY’s Talent Shared Services. EY | Building a better working world
#J-18808-Ljbffr
Government and Public Sector – Cybersecurity – Cyber Threat Intelligence Manager Location: McLean. Date: Feb 21, 2026. Requisition ID: 1687257. At EY, we’re all in to shape your future with confidence. We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go. Join EY and help to build a better working world. Responsibilities
As a Cyber Threat Intelligence Manager, analyze, synthesize, and disseminate actionable threat intelligence to enhance cyber defense operations. Integrate an intelligence-led perspective across security domains and collaborate with tactical security teams, including Red, Blue, and Purple Teams, as well as Risk Management, Vulnerability Management, and Incident Response teams to provide intelligence-driven decision support before, during, and after cyber incidents. Engage in threat actor profiling, infrastructure analysis, attribution efforts, forecasting, and proactive threat hunting to support the development of reactive and proactive cyber defenses. Craft and deliver clear, concise, and actionable intelligence reports for technical and executive audiences. Mentor junior analysts and contribute to the evolution of the cyber threat intelligence team by enhancing analytic tradecraft, methodology development, and operational efficiency. Engage with industry forums, conferences, and professional development opportunities to maintain a cutting-edge understanding of emerging threats and intelligence methodologies. Qualifications
Bachelor’s degree in Computer Science, Information Systems, Engineering, Business, or a related field, and 7–10 years of related work experience. Certifications: CISSP, CISM, CISA, OSCP, CEH, or SANS GIAC certifications (GCTI, GSE, GDAT, GDSA, GMON) as applicable. Demonstrated experience with intelligence standards such as STIX/TAXII, DHS TLP, ICD203 & ICD206. Strong ability to research, validate, and analyze threat data from open and closed-source feeds. Expertise in MITRE ATT&CK, intelligence tradecraft, structured analytic techniques, and cyber threat modeling. Hands-on experience with Threat Intelligence Platforms (TIPs), SIEM, SOAR, and network forensic tools. Proficient in scripting and automation (Python, PowerShell, or Bash) for intelligence enrichment and analysis. Ability to translate technical intelligence into business risk narratives for executive audiences. Experience integrating intelligence into Vulnerability Management, Incident Response, and Risk Management frameworks. Active TS/SCI clearance with polygraph eligibility; willingness to work on-site 3 days a week in the greater Washington, DC area. Note: Travel up to 20–30% may be required; some work may be completed at client, EY, and/or contractor sites. Ideally, you’ll also have
Prior consulting experience and experience with technical and strategic intelligence fusion. Strong understanding of cybercriminal underground ecosystems and cyber espionage threats. Familiarity with cloud security, monitoring, and forensics. Experience with adversary emulation, attack surface management, and deception technologies. Background in malware analysis and reverse engineering. Law enforcement, defense, or critical infrastructure threat intelligence experience. What we look for
We’re looking for intellectually curious people with a genuine passion for cybersecurity who can contribute innovative ideas and grow into a leading expert. EY offers a global scale, support, inclusive culture, and technology to help you build\u00a0an exceptional experience. What we offer
We offer a competitive compensation package with a Total Rewards program including medical/dental coverage, pension and 401(k), and a wide range of paid time off. We provide flexible vacation, EY holidays, and personal/family care leave to support well-being. We operate a hybrid model with most client-serving roles expected to work 40–60% on-site. We also provide ongoing learning and leadership development opportunities to shape your future with confidence. EY is committed to equal employment opportunities and to providing reasonable accommodations. If you need assistance applying online or require an accommodation during the application process, please contact EY’s Talent Shared Services. EY | Building a better working world
#J-18808-Ljbffr