Threat Intelligence Analyst

Key Responsibilities Collect and analyze threat intelligence from commercial feeds, OSINT, ISACs, vendor advisories, malware reports, and internal incident findings. Produce tactical, operational, and strategic threat intelligence reports for SOC teams, security engineering teams, and leadership stakeholders. Map adversary TTPs to the MITRE ATT&CK framework and translate intelligence into threat hunting hypotheses, detection content, and SOAR enrichment. Validate and investigate IOCs, including IP addresses, domains, URLs, hashes, malware families, and campaign indicators. Support investigations related to phishing, BEC, ransomware, cloud compromise, and targeted attacks by providing adversary context. Maintain threat actor profiles, intelligence requirements, collection plans, and business risk mappings. Manage and optimize threat feeds within SIEM, SOAR, and TIP platforms while reducing false positives and duplicate indicators. Provide regular briefings on emerging threats, attack campaigns, and recommended security actions. Mandatory Skills Threat Intelligence Lifecycle OSINT (Open-Source Intelligence) IOC Analysis & Validation TTP Analysis and Adversary Tracking MITRE ATT&CK Framework Cyber Kill Chain & Diamond Model Intelligence Report Writing SIEM, SOAR, and TIP Platforms EDR/XDR Technologies Email Security & Malware Analysis Detection Engineering & Threat Hunting Strong Stakeholder Communication Skills Preferred Certifications GCTI (GIAC Cyber Threat Intelligence) CTIA (Certified Threat Intelligence Analyst)