Threat Intelligence Analyst

This is a fully remote position, open to applicants in United States.

📋 Description

• Gather data, investigate threats, analyze information, and generate actionable insights for key stakeholders.

• Enhance enterprise detection, response capabilities, and risk awareness.

• Identify data collection opportunities and monitor adversary activities.

• Examine campaigns and develop scripts and tools to provide scalable analysis.

• Conduct research on adversary groups, campaigns, emerging threat techniques, malware families, and attack infrastructures.

• Execute high-interaction analyses of phishing campaigns, command-and-control infrastructures, and attacker tools.

• Create automation pipelines to collect, normalize, and enrich threat intelligence data.

• Manage internal intelligence repositories and campaign tracking systems.

• Design and maintain basic APIs that integrate with enterprise security platforms.

• Assess threat intelligence feeds and data sources for timeliness, reliability, and relevance.

• Generate threat intelligence reports and analyses of campaigns.

• Present technical briefings to security teams and executive stakeholders.

• Assist in incident investigations by providing adversary context and attribution insights.

• Evaluate client threat intelligence functions and formulate actionable improvement roadmaps.

• Contribute insights to detection engineering, threat hunting, and adversary emulation teams.

⛳️ Requirements

• Minimum of 4 years of experience in threat intelligence.

• At least 2 years of experience in writing analysis scripts or other relevant automation.

• A minimum of 2 years of experience with sandboxes and sandboxing technologies.

• At least 2 years of experience tracking criminal threat actors.

• Proficient in analyzing adversary tactics and campaigns.

• Knowledge of enterprise attack techniques.

• Experience in producing technical intelligence reports.

• Ability to translate threat intelligence insights into actionable threat detection, threat hunting, or other control recommendations.

• Preferred: At least 2 years of experience working as a threat intelligence analyst in a professional setting.

• Preferred: Proven record of open source contributions or conference presentations related to automated analysis of threat data, sandboxing, or related subjects.

• Preferred: Experience in malware analysis, including writing and maintaining Yara signatures.

• Preferred: Experience tracking nation-state actors.

• Preferred: Familiarity with threat intelligence platforms such as MISP and OpenCTI.

• Preferred: Proficiency in Python or other scripting languages.

🏝️ Benefits

• Competitive salary and performance-based bonuses.

• Comprehensive health, dental, and vision insurance plans.

• Generous paid time off and flexible work arrangements.

• Opportunities for professional development and continuous learning.

• Collaborative work environment with a focus on innovation.