Threat Intelligence Analyst

Key Responsibilities

\n
• Collect and analyze threat intelligence from commercial feeds, OSINT, ISACs, vendor advisories, malware reports, and internal incident findings.
\n
• Produce tactical, operational, and strategic threat intelligence reports for SOC teams, security engineering teams, and leadership stakeholders.
\n
• Map adversary TTPs to the MITRE ATT&CK framework and translate intelligence into threat hunting hypotheses, detection content, and SOAR enrichment.
\n
• Validate and investigate IOCs, including IP addresses, domains, URLs, hashes, malware families, and campaign indicators.
\n
• Support investigations related to phishing, BEC, ransomware, cloud compromise, and targeted attacks by providing adversary context.
\n
• Maintain threat actor profiles, intelligence requirements, collection plans, and business risk mappings.
\n
• Manage and optimize threat feeds within SIEM, SOAR, and TIP platforms while reducing false positives and duplicate indicators.
\n
• Provide regular briefings on emerging threats, attack campaigns, and recommended security actions.
\n

Mandatory Skills

\n
• Threat Intelligence Lifecycle
\n
• OSINT (Open-Source Intelligence)
\n
• IOC Analysis & Validation
\n
• TTP Analysis and Adversary Tracking
\n
• MITRE ATT&CK Framework
\n
• Cyber Kill Chain & Diamond Model
\n
• Intelligence Report Writing
\n
• SIEM, SOAR, and TIP Platforms
\n
• EDR/XDR Technologies
\n
• Email Security & Malware Analysis
\n
• Detection Engineering & Threat Hunting
\n
• Strong Stakeholder Communication Skills
\n

Preferred Certifications

\n
• GCTI (GIAC Cyber Threat Intelligence)
\n
• CTIA (Certified Threat Intelligence Analyst)
\n