Who we are: ShorePoint is a fast-growing, industry recognized and award-winning cybersecurity services firm with a focus on high-profile, high-threat, private and public-sector customers who demand experience and proven security models to protect their data. ShorePoint subscribes to a "work hard, play hard" mentality and celebrates individual and company successes. We are passionate about our mission and going above and beyond to deliver for our customers. We are equally passionate about an environment that supports creativity, accountability, diversity, inclusion and a focus on giving back to our community. The Perks: As recognized members of the Cyber Elite, we work together in partnership to defend our nation's critical infrastructure while building meaningful and exciting career development opportunities in a culture tailored to the individuals technical and professional growth. We are committed to the belief that our team members do their best work when they are happy and well cared for. In support of this philosophy, we offer a comprehensive benefits package, including major carriers for health care providers. Highlighted benefits offered: 18 days of PTO, 11 holidays, 85% of insurance premium covered, 401k, continued education, certifications maintenance and reimbursement and more. Who we're looking for: We are seeking a Cyber Threat Intelligence (CTI) Analyst who serves as a technical subject matter expert (SME) in penetration testing. This role analyzes vulnerability scan data to identify security weaknesses across Information Technology (IT) and/or Operational Technology (OT) networks and deliver actionable risk mitigation recommendations. The CTI Analyst role will contribute to analysis, reporting, and coordination activities in a fast-moving team environment. This is a unique opportunity to shape the growth, development and culture of an exciting and fast-growing company in the cybersecurity market. What you'll be doing:

• Analyze scan data from multiple at-risk entities to identify and assess security weaknesses in IT and/or OT networks.
• Provide risk mitigation recommendations for identified security weaknesses.
• Produce clear written reports and summaries of findings and recommendations for stakeholders.
• Coordinate with internal team members to support prioritization and tracking of identified security weaknesses.

What you need to know:

• Ability to translate technical findings into clear written deliverables and stakeholder-ready updates.
• Working understanding of how vulnerability findings are prioritized and tracked through remediation.

Must have's:

• 10+ years of experience in penetration testing.
• Proven ability to analyze complex requirements and translate them into clear, actionable tasks and processes through critical thinking.
• Experience working with large datasets involving cyber vulnerability risk information.
• Experience working with vulnerability scanning applications (ex: Shodan, Censys).
• Knowledge of scripting languages such as Python, JavaScript, or SQL.
• Familiarity with the CTI lifecycle and experience handling public source cyber threat/vulnerability intelligence.
• Familiarity and knowledge of MITRE ATT&CK (Adversarial Tactics, Techniques, and Common Knowledge).
• Ability to work within a fast-moving team with minimal supervision and demonstrate problem-solving skills.
• Demonstrated analytical mindset, attention to detail, and strong reporting skills.
• Applicants must hold and maintain an active Top Secret clearance (no dual citizenship).

Beneficial to have:

• Penetration testing experience with Industrial Control Systems (ICS) and/or Operational Technology (OT).

Where it's done:

• Remote (Herndon, VA).

Apply To this Job