Cyber Threat Intel Analyst

Cyber Threat Intelligence Analyst

Overview:
Seeking a Cyber Threat Intelligence Analyst to support a high-impact cybersecurity program within a complex, technology-driven environment. This role focuses on identifying, analyzing, and contextualizing emerging cyber threats, with an emphasis on understanding adversary behavior and strengthening defensive capabilities.
You will operate from the perspective of threat actors—analyzing motivations, techniques, and attack patterns—to deliver actionable intelligence that improves detection, response, and overall security posture.
Responsibilities:

Perform in-depth threat research and analysis related to advanced cyber adversaries, including nation-state and criminal activity
Assess how emerging threats impact organizational systems, users, and operations
Collaborate with security operations teams to support incident detection, response, and investigation efforts
Develop and refine detection logic, signatures, and monitoring strategies
Translate complex technical findings into clear, actionable intelligence for both technical and non-technical stakeholders
Produce concise threat assessments, reports, and intelligence summaries
Identify indicators of compromise (IOCs) and map them to adversary tactics, techniques, and procedures (TTPs)
Contribute to improving defensive measures, reducing attack surface, and strengthening overall cybersecurity posture
Escalate significant findings and collaborate with cross-functional teams for further analysis and response

Required Qualifications:

6+ years of experience in cybersecurity or information security
4+ years of hands-on experience in cyber threat intelligence or threat research
Strong understanding of adversary methodologies, including nation-state and organized cybercrime activity
Experience translating complex cyber events into clear narratives for varied audiences
Working knowledge of internet technologies, online ecosystems, and publicly available data sources
Experience with network protocols, system operations, and security monitoring tools
Hands-on experience with SIEM and endpoint technologies (e.g., Splunk, Microsoft Defender, SentinelOne, BigFix, or similar tools)
Familiarity with threat analysis frameworks such as MITRE ATT&CK, Cyber Kill Chain, and Diamond Model
Experience collecting and analyzing IOCs and using them to identify intrusion activity and attack patterns
Strong analytical writing skills with the ability to produce concise, high-quality intelligence reporting
Bachelor’s degree or equivalent professional experience

Preferred Qualifications:

Background supporting intelligence, national security, or mission-focused environments
Experience with threat intelligence platforms such as MISP, Mandiant, CrowdStrike, Recorded Future, or similar
Experience in intelligence collection and development of analytic products
Industry certifications such as GCIA, GCIH, GCFA, GNFA, GCTI, GREM, or comparable