Cybersecurity Intelligence Counterintelligence Analyst

MANTECH seeks a mission-focused Cybersecurity Intelligence and Counterintelligence Analyst located at Vandenberg Space Force Base, CA.

Supporting the 630th Cyberspace Squadron (630 CYS), Space Launch Delta 30, this on-site role at Vandenberg Space Force Base, CA, protects Western Launch and Test Range Systems (W-LTRS). You will provide intelligence analysis, CI-informed research, cyber threat intelligence, and mission assurance across range safety networks, telemetry, tracking infrastructure, electrical distribution, and Industrial Control System (ICS) environments.

Working under senior leadership, the Intelligence and Counterintelligence Analyst monitors cyber threat reporting, research adversary activity, supports collection planning, and maintains threat databases. This role delivers timely reporting on cyber risks affecting launch-critical systems in support of authorized cyber defense operations, without carrying independent CI investigative or law enforcement authority.

Responsibilities include but are not limited to:

• Conduct intelligence research and analysis using authorized intelligence reporting, cyber threat intelligence sources, mission data, open-source information, and other approved repositories relevant to Western Range operations.

• Monitor designated cyber threat intelligence platforms and reporting channels for emerging threats, adversary campaigns, indicators of compromise, technical indications and warnings, suspicious activity, and potential foreign cyber threat indicators affecting mission systems.

• Support senior analysts with cyber threat analysis, adversary profiling, pattern-of-life analysis, and proactive threat-hunting activities across designated mission environments.

• Research and document adversary tactics, techniques, and procedures (TTPs), malware, indicators of compromise, cyber infrastructure, targeting patterns, and active cyber campaigns; identify analytic gaps and elevate significant findings to senior analysts and designated government personnel.

• Support intelligence requirements, collection planning, and information-gap management in coordination with mission-planning cells, range operators, cybersecurity personnel, and authorized intelligence partners.

• Draft, review, and maintain intelligence products and analytic records, including threat summaries, assessments, indications-and-warning products, briefing materials, executive summaries, technical reports, Requests for Information (RFIs), intelligence databases, production trackers, and source-reference documentation.

• Support Mission Area Intelligence Preparation of the Battlefield (IPB) reassessments and weekly intelligence briefings by conducting research, validating information, updating source material, identifying adversary trends, and preparing leadership presentation materials.

• Support analysis and exercise activities affecting mission-critical systems, including Supervisory Control and Data Acquisition (SCADA), industrial control systems, operational technology, and electrical distribution infrastructure; assist with threat-emulation activities, cyber exercises, post-action validation, lessons learned, and recommended cyber-hardening actions.

Minimum Qualifications

• Bachelor’s degree in Cybersecurity, Intelligence, IT, Engineering, or a related field.; an additional 4 years of relevant experience might be substituted for a degree.

• 2+ years of relevant experience in intelligence analysis, cyber threat intelligence, cybersecurity operations, defensive cyber operations, security operations, threat analysis, counterintelligence support, military operations, or a related field.

• Foundational knowledge of cyber threat intelligence, intelligence requirements, collection management, intelligence production, analytic reporting, defensive cyberspace operations concepts, adversary TTPs, indicators of compromise, malware, and cyber campaign reporting.

• Ability to research cyber threats, produce intelligence summaries and briefings, identify analytic gaps, and escalate critical findings.

• Must meet applicable Department of War 8140.3 Cybersecurity Workforce Qualification Requirements, Basic Level, for the assigned labor category and work role.

Preferred Qualifications

• Experience supporting United States Space Force, Department of War, intelligence community, space-launch, range-operations, cybersecurity, or critical-infrastructure missions.

• Experience supporting cyber threat intelligence, defensive cyberspace operations, security operations centers, incident response, cyber threat hunting, or intelligence-production activities.

• Familiarity with Mission Area IPB, intelligence requirements management, collection planning, or Joint Planning Process concepts.

• Familiarity with Defensive Cyber Operations–Space (DCO-S) tools, including Manticore and Kraken, and intelligence and counterintelligence collection tools and resources.

• Familiarity with SCADA systems, industrial control systems, operational technology, critical infrastructure, or mission-support infrastructure; including experience supporting cyber exercises, threat emulation, adversary-replication activities, or post-action validation assessments.

Clearance

Requirements

• Current Top Secret/Sensitive Compartmented Information (TS/SCI) clearance is required.

Physical

Requirements

• Willingness to travel within the organizational area of responsibility, including air and ground transportation, as required.

• Must be able to remain in a stationary position approximately 50 percent of the time using standard or adjustable desks and chairs in secure work environments.

• Occasionally required to move about office and technical work areas to access files, systems, equipment, and other mission-support resources.

• May be required to support cyber exercises, operational briefings, incident-driven activities, and other mission requirements outside normal business hours.