Senior Forward Deployed Analyst

America is under sustained cyber attack. Our adversaries infiltrate our networks, steal our IP, and degrade the digital infrastructure that modern life runs on. They’ve learned—correctly—that those attacks rarely produce consequences.

Twenty was founded to change that, by making our adversaries think twice before they attack us. Our vision is American and allied primacy in cyberspace—a future where they cannot contest us, deterrence is assured, and the free world remains secure.

Founded in 2024, Twenty Technologies (www.twenty.io) industrializes offensive cyber operations for the U.S. and its allies. Headquartered in Arlington, Virginia, Twenty has raised $168M from Khosla Ventures, Accel, Caffeinated Capital, Friends & Family Capital, Point72 Ventures, General Catalyst, and In-Q-Tel.

Mission | Hybrid | Full Time | Active TS/SCI with CI Polygraph

Twenty is seeking a Senior Forward Deployed Analyst in the San Antonio, TX area to serve as the subject matter expert (SME) bridging the gap between our revolutionary cyber technologies and real-world operational requirements. We're looking for someone with 10+ years of experience in cyber operations and intelligence analysis, with deep expertise in Digital Network Exploitation and Analysis (DNEA) and/or Exploitation Analyst (EA) operations within the U.S. Government military or intelligence organizations. In this role, you'll be the technical voice of the operator, working directly with our world-class engineering team to ensure our AI-powered graph database applications meet the complex demands of modern cyber operations. You'll translate operational requirements into technical specifications, validate that our systems enhance rather than hinder operator decision-making, and serve as the critical link between the battlefield of cyberspace and the development teams building tomorrow's cyber capabilities. If you're passionate about leveraging your operational expertise to shape the next generation of cyber tools while making a direct impact on national security, we want to talk to you.

• Perform Digital Network Exploitation and Analysis (DNEA) analysis or Exploitation Analyst cyber operations as an integrated member of our operational team, conducting real-world cyber intelligence analysis and exploitation activities

• Execute network analysis, persona development, and threat actor attribution using both traditional methods and our AI-enhanced graph database systems

• Maintain operational proficiency and credibility through regular engagement in live cyber operations and intelligence production

• Serve as the primary SME for cyber operations and intelligence analysis, translating complex operational workflows into technical requirements for engineering teams

• Validate that AI-powered graph database applications accurately represent and enhance cyber operations in both defensive and offensive contexts

• Lead requirements gathering sessions with government customers and translate operational needs into actionable development priorities

• Must possess and be able to maintain a TS/SCI security clearance with appropriate polygraph

• U.S. citizenship required

• Willingness to travel occasionally for customer engagements and operational support

Due to U.S. government contract and security requirements, this role is limited to U.S. citizens. Some positions may also require eligibility to obtain and maintain a U.S. Government security clearance. Any active clearance requirement will be listed in the role description.

Twenty is an equal opportunity employer. We consider all qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, veteran status, disability, or any other protected status, consistent with applicable law.

If you need a reasonable accommodation during the hiring process, let us know and we will work with you.

• Work directly with cyber operators to gather feedback on user interface designs and system workflows

• Create training materials and documentation that help operators effectively utilize our AI-enhanced cyber tools

• Represent Twenty in customer engagements, leveraging operational credibility to build trust and understanding

• Lead technical demonstrations that showcase how our AI and graph database technologies enhance operational effectiveness

• Collaborate with government stakeholders to identify emerging operational requirements and capability gaps

• 10+ years of professional experience in cyber operations and intelligence analysis within U.S. Government military or intelligence organizations

• Expert-level knowledge of Digital Network Exploitation and Analysis (DNEA) and Exploitation Analyst (EA) methodologies and tools

• Deep understanding of cyber operations across both defensive and offensive mission sets

• Extensive experience with multi-domain intelligence analysis correlating cyber, SIGINT, GEOINT, and HUMINT

• Demonstrated expertise in network analysis, persona development, and threat actor attribution

• Strong background in operational planning and mission execution in cyber environments

• Advanced understanding of network protocols, exploitation techniques, and cyber attack methodologies

• Experience with graph-based analysis tools and methodologies for intelligence analysis

• Knowledge of AI/ML applications in cyber operations and intelligence analysis

• Familiarity with cloud platforms and their security implications for government operations

• Understanding of IoT protocols, WiFi exploitation, and electromagnetic spectrum operations

• Experience with data visualization tools and techniques for complex intelligence presentations

• Proven ability to translate complex technical concepts for diverse audiences including senior government officials

• Strong leadership experience mentoring analysts and leading operational teams

• Excellent written and verbal communication skills with ability to produce high-quality intelligence products

• Experience briefing senior leadership and providing operational recommendations

• Demonstrated ability to work effectively in cross-functional teams with technical and non-technical stakeholders

• Bachelor's degree in Computer Science, Cybersecurity, Intelligence Studies, or related field, or equivalent operational experience

• Advanced degrees or relevant certifications preferred

• Previous experience as a technical lead or senior analyst in government cyber operations units

• Track record of successfully transitioning from operational roles to product development or requirements engineering

• Experience with government acquisition processes and requirements development

• Background in training and doctrine development for cyber operations

• Previous experience working with defense contractors or in public-private partnerships

• Publications or presentations in cyber operations or intelligence analysis fields

• Advanced technical certifications in cyber operations or intelligence analysis