Government and Public Sector - Cybersecurity - Cyber Threat Intelligence Senior Consultant

At EY, we’re all-in to shape your future with confidence. 

We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go.  Join EY and help build a better working world.

 

Government and Public Sector – Technology Consulting - Cybersecurity – Cyber Threat Intelligence Senior Consultant

 

The opportunity

 

EY’s Government & Public Sector (GPS) Cyber Security practice helps Federal, State, Local, and Education clients protect mission critical systems, manage cyber risk, and improve resilience. Our teams support clients in designing, building, and maturing intelligence led cybersecurity capabilities that enable informed decisions and operational effectiveness.

 

As a Cyber Threat Intelligence (CTI) Senior, you will shape intelligence‑led cybersecurity programs for government clients, with a focus on program design, operational integration, and long‑term capability maturity.

 

The role emphasizes program ownership, trusted advisory leadership, solution development, and operational involvement to guide delivery teams, validate analytic approaches, and drive measurable mission and risk outcomes.

 

Role summary

 

The CTI Senior supports the development and expansion of intelligence led cyber security programs, including supply chain risk management (CSCRM) and third-party risk use cases. You will own delivery of CTI capabilities across one or more engagements, advise senior client stakeholders on CTI operating models and technologies, mentor analysts and consultants, and contribute to practice growth through capture support, solution shaping, and thought leadership.

 

You will position CTI as a control‑enabling function that supports Zero Trust initiatives, supply‑chain assurance, and enterprise risk decision‑making across classified and unclassified environments.

 

This role is designed for a professional who understands how CTI should function operationally while focusing on building, guiding, improving programs, and running intelligence operations as required.

 

Key responsibilities

 

CTI Program Design & Enablement

 

• Lead the design, maturation, and scaling of cyber threat intelligence programs, including operating models, governance, workflows, analytic standards, and quality controls.
• Help clients define intelligence requirements aligned to mission, risk, and operational priorities.
• Align intelligence requirements to federal cybersecurity frameworks and mission assurance objectives (e.g., NIST CSF, Zero Trust).
• Develop recommendations and roadmaps to improve CTI effectiveness and integration across cybersecurity and risk functions.
• Lead intelligence‑driven supply chain and ecosystem risk capabilities that inform acquisition, vendor trust, and mission partner assurance decisions.
• Apply CTI to nation‑state and criminal targeting of suppliers in support of EO 14028, NIST 800‑161, and CMMC‑aligned risk programs.

 

CTI Technology & Integration Advisory

 

• Advise clients on the selection, implementation, and optimization of CTI platforms and tooling.
• Support the design of intelligence pipelines for collection, enrichment, scoring, and dissemination.
• Guide integration of CTI into SOC, Incident Response, Vulnerability Management, and cybersecurity risk management programs.
• Leverage knowledge of automation and scripting concepts to inform scalable program design.
• Understand how automation, analytics, and emerging AI capabilities influence modern
• CTI production and consumption models.

 

Advisory Support & Operational Alignment

 

• Serve as an advisor to security and risk teams on how to consume and operationalize intelligence.
• Provide subject matter guidance during incidents or threat investigations as needed, without acting as the primary operator.
• Provide intelligence outputs that directly inf