Threat Intelligence Analyst

About the Role:

Threat Intelligence Analyst

Key Responsibilities:

Threat Monitoring & Intelligence Collection:

• Monitor and collect data from threat intelligence platforms, social media, dark web, forums, and security communities.
  
• Identify indicators of compromise (IOCs), tactics, techniques, and procedures (TTPs), and emerging threat patterns.
  
• Track threat actor activity, malware campaigns, phishing trends, and geopolitical developments impacting cybersecurity.

Analysis & Reporting:

• Analyze and contextualize cyber threat data to assess relevance and potential impact on the organization.
  
• Create detailed threat intelligence reports, alerts, and briefings for security teams and leadership.
  
• Provide real-time intelligence to support Security Operations Center (SOC), incident response, and vulnerability management.

Tooling & Automation:

• Utilize and maintain threat intelligence tools and platforms (e.g.,

  ThreatConnect, MISP, Recorded Future, Anomali, OpenCTI

  ).
• Correlate intelligence data using SIEM tools (e.g.,

  Splunk, QRadar, Sentinel

  ) and integrate IOCs into detection systems.
• Develop scripts or automation to enrich intelligence and streamline workflows.

Preferred Qualifications:

• Certifications such as

  GCTI, CEH, GCIA, GPEN, GCFA, or OSINT-specific training

  .
• Knowledge of geopolitical and regional threats (APT groups, hacktivists, cybercrime groups).
  
• Experience working with STIX/TAXII, MISP, or Sigma/YARA rules.