Threat Intelligence Analyst

Key Responsibilities

• Collect and analyze threat intelligence from commercial feeds, OSINT, ISACs, vendor advisories, malware reports, and internal incident findings.
• Produce tactical, operational, and strategic threat intelligence reports for SOC teams, security engineering teams, and leadership stakeholders.
• Map adversary TTPs to the MITRE ATT&CK framework and translate intelligence into threat hunting hypotheses, detection content, and SOAR enrichment.
• Validate and investigate IOCs, including IP addresses, domains, URLs, hashes, malware families, and campaign indicators.
• Support investigations related to phishing, BEC, ransomware, cloud compromise, and targeted attacks by providing adversary context.
• Maintain threat actor profiles, intelligence requirements, collection plans, and business risk mappings.
• Manage and optimize threat feeds within SIEM, SOAR, and TIP platforms while reducing false positives and duplicate indicators.
• Provide regular briefings on emerging threats, attack campaigns, and recommended security actions.

Mandatory Skills

• Threat Intelligence Lifecycle
• OSINT (Open-Source Intelligence)
• IOC Analysis & Validation
• TTP Analysis and Adversary Tracking
• MITRE ATT&CK Framework
• Cyber Kill Chain & Diamond Model
• Intelligence Report Writing
• SIEM, SOAR, and TIP Platforms
• EDR/XDR Technologies
• Email Security & Malware Analysis
• Detection Engineering & Threat Hunting
• Strong Stakeholder Communication Skills

Preferred Certifications

• GCTI (GIAC Cyber Threat Intelligence)
• CTIA (Certified Threat Intelligence Analyst)