Threat Intelligence Analyst

Job Description

We are seeking a highly motivated Threat Intelligence Analyst to join our Cybersecurity team. In this role, you will identify, analyze, and monitor emerging cyber threats targeting our organization. You will collect and evaluate threat intelligence from multiple sources, track threat actors and attack techniques, and provide actionable insights to strengthen our security posture. The ideal candidate has strong analytical skills, experience with threat intelligence platforms, and a passion for staying ahead of evolving cyber threats.

Key Responsibilities

• Research, collect, and analyze cyber threat intelligence from internal and external sources.
• Monitor emerging threats, malware campaigns, ransomware groups, and nation-state activities.
• Identify Indicators of Compromise (IOCs), Tactics, Techniques, and Procedures (TTPs), and attack trends.
• Produce actionable threat intelligence reports and risk assessments for security teams and leadership.
• Collaborate with Security Operations Center (SOC), Incident Response, and Vulnerability Management teams to improve threat detection and response.
• Conduct proactive threat hunting using intelligence-driven methodologies.
• Utilize frameworks such as MITRE ATT&CK to map adversary behaviors and identify defensive gaps.
• Monitor dark web forums, threat feeds, and open-source intelligence (OSINT) for relevant threats.
• Develop and maintain threat intelligence dashboards, reports, and executive briefings.
• Recommend security improvements based on intelligence findings and emerging risks.
• Support incident investigations by providing contextual threat intelligence.
• Stay current with the latest cybersecurity trends, threat actors, attack techniques, and industry best practices.

Required Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a related field (or equivalent experience).
• 2+ years of experience in Cybersecurity, Threat Intelligence, SOC, or Incident Response.
• Strong understanding of network security, malware analysis, and cyber attack methodologies.
• Experience with SIEM platforms such as Splunk, Microsoft Sentinel, or QRadar.
• Familiarity with threat intelligence platforms (TIPs), OSINT tools, and malware analysis tools.
• Knowledge of MITRE ATT&CK, Cyber Kill Chain, and common threat frameworks.
• Excellent analytical, problem-solving, and communication skills.
• Ability to work independently and collaboratively in a fast-paced environment.

Preferred Qualifications

• Experience with Python, PowerShell, or other scripting languages.
• Knowledge of cloud security (AWS, Azure, or Google Cloud).
• Familiarity with threat hunting, digital forensics, and incident response.
• Experience using SOAR platforms and security automation tools.
• Industry certifications such as CompTIA Security+, CySA+, GCIH, GCIA, GCFA, CISSP, or Certified Threat Intelligence Analyst (CTIA) are a plus.

Key Skills

• Threat Intelligence Analysis
• Threat Hunting
• Malware Analysis
• Threat Actor Tracking
• SIEM & Log Analysis
• Incident Response
• MITRE ATT&CK Framework
• OSINT Research
• Risk Assessment
• Digital Forensics
• Network Security
• Python/PowerShell
• Cloud Security
• Communication & Reporting