Threat Intelligence Liaison (us Federal)

Workday Workday · Enterprise · USA.VA.Reston

This role is a Threat Intelligence Liaison for Workday Government, focusing on integrating threat intelligence into security operations for U.S. federal agencies. It involves analyzing intelligence, mapping TTPs, and delivering actionable insights to enhance SOC monitoring and detection engineering within government SaaS environments. The role requires strong cybersecurity and intelligence lifecycle knowledge, with experience supporting government networks and SaaS platforms.

What you'd actually do

  1. Collect, evaluate, and analyze threat intelligence from government stakeholders, industry partners, and intelligence-sharing communities
  2. Map adversary tactics and techniques to the MITRE ATT&CK® framework
  3. Translate intelligence into detection requirements, hunting hypotheses, and SOC briefings
  4. Partner closely with SOC analysts and detection engineers to operationalize intelligence
  5. Deliver executive and technical intelligence reports and threat landscape updates

Skills

Required

  • cybersecurity
  • threat intelligence
  • incident response
  • SOC operations
  • detection engineering
  • adversary TTPs
  • intelligence lifecycle
  • executive communication
  • technical communication
  • MITRE ATT&CK® framework

Nice to have

  • SaaS platforms within government networks
  • CISA guidance
  • NSA guidance
  • NIST guidance
  • intelligence platforms (e.g., MISP, commercial threat intel tools)

What the JD emphasized

  • U.S. Federal Government
  • United States citizens
  • government SaaS environments
  • air-gapped region (AGR) deployments
  • 7+ years of experience in cybersecurity, threat intelligence, incident response, or related field
  • Experience supporting SOC operations and/or detection engineering teams
  • Strong understanding of adversary TTPs and the intelligence lifecycle
  • Ability to brief both technical and executive audiences
  • Experience supporting SaaS platforms within government networks
  • Familiarity with guidance from CISA, NSA, and NIST
  • Clearance eligibility