Senior Threat Intelligence Analyst
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Senior threat intelligence analyst researching cyber threats for Team Cymru, an internet threat intelligence company. Analyzing malicious infrastructure, producing intelligence reports, and guiding detection and analytics tooling.
Responsibilities:
- Conduct proactive research into threat actors, malware families, campaigns, and evolving TTPs
- Investigate and present operational and strategic intelligence, including attribution, motivation, capability, and geopolitical context
- Lead short- and long-term threat tracking projects and identify intelligence gaps
- Evaluate and share tools, methodologies, and best practices for understanding adversary TTPs
- Perform network traffic and infrastructure analysis using global datasets
- Analyze PCAP, NetFlow, passive DNS, open ports, certificates, and other datasets to map malicious infrastructure
- Identify and refine IOCs and threat actor TTPs and translate them into automated tracking mechanisms
- Triage and respond to customer requests with tailored written technical threat intelligence reports
- Ensure intelligence products meet analytic standards and contain actionable conclusions
- Conduct peer reviews of colleagues' reporting
- Collaborate on analytical tools, data analytics systems, research methodologies, and analysis automation
- Support threat detection and data acquisition teams with signature development and telemetry collection priorities
- Participate in working groups, industry events, and community collaboration as a Team Cymru representative
Requirements:
- 5+ years of experience as a threat intelligence analyst, network forensics analyst, or IT security analyst
- Bachelor's degree in Computer Science, Computer Engineering, Cybersecurity, or equivalent is preferred
- Exceptional oral and written communication skills
- Ability to produce customer-facing intelligence reports under time pressure
- Experience using structured analysis techniques, estimative language, and confidence levels is preferred
- Proven track record leading complex analytical projects or investigations
- Ability to manage multiple concurrent work streams
- Strong analytical, deductive reasoning, and critical thinking skills
- Ability to work effectively within a distributed, remote team environment
- Experience tracking APT, nation-state, or cybercriminal actors
- Outstanding network infrastructure and traffic analysis skills: PCAP, NetFlow, PDNS, open ports, and certificates
- Deep working knowledge of IP networking and internet services: DNS, HTTP/HTTPS, TLS, VPNs, and BGP
- Knowledge of operating system concepts, IOCs, and host- and network-level detection architectures
- Working proficiency in SQL and querying and analyzing large disparate datasets
- Strong familiarity with common OSINT platforms and research techniques
- Occasional travel within the UK and internationally is required
- Programming or scripting proficiency, preferably Python, is highly desirable
- Familiarity with AI systems, Linux servers, malware analysis, YARA, Zeek, Suricata, sandbox reporting, reverse engineering tools, and internet infrastructure operations is highly desirable
Benefits:
- Collaborative, mission-driven culture
- Opportunity to work on global cybersecurity and threat intelligence
- Participation in exclusive conferences, industry events, working groups, and community collaboration
- Remote work
- Occasional travel within the UK and internationally for customer workshops, industry events, and team meetings
Similar Jobs
Principal Workday Analyst – Security
Principal Workday Security Analyst leading security architecture and governance for Medtronic’s global healthcare technology platform. Protecting sensitive data, controls, and access across Workday modules.
Cyber Security Analyst
Cyber Security Analyst supporting First Quality’s personal care and household products businesses. Detecting threats, investigating incidents, tuning SIEM rules, and automating SOC response workflows.
Senior Cyber Security Analyst
Senior cloud security analyst engineering controls and defenses for GDIT, a technology and professional services provider to government and defense customers. Supporting CMS security operations, compliance, and Zero Trust initiatives.
Senior Director, Analyst – Cybersecurity, Emerging Technologies, CIO, AI Leaders
Gartner cybersecurity analyst researching AI, quantum, and cloud-native risks for CIOs and AI Leaders. Advising enterprise clients on security strategy, governance, technology selection, and transformation.
Cybersecurity Analyst
Cybersecurity Analyst supporting NIST-based risk assessments for Black Fox LLC’s public sector and commercial clients. Reviewing controls, documenting findings, and assisting cybersecurity consultants with reports and remediation tracking.
Security Analyst II
Security Analyst monitoring and responding to threats across customer environments for NexusTek, a managed IT and cybersecurity provider. Tuning Rapid7 detections, investigating incidents, and supporting compliance and SOC improvements remotely in the United States.
Security Analyst I
Security Analyst I monitoring and responding to cyber threats for Ntiva, a managed services provider. Investigating alerts, securing accounts, documenting incidents, and escalating complex cases.
IT Security Analyst – Level 1
Information Security Analyst protecting Spellman’s high-voltage electronics systems from cyber threats. Monitoring events, responding to incidents, and managing vulnerabilities across hybrid environments.
Senior Threat Intelligence Analyst
Senior Threat Intelligence Analyst prioritizing threats and vulnerabilities for Expel’s managed detection and response customers. Producing intelligence reports and guiding SOC analysts on emerging cyber threats.
Information Security Analyst
Information Security Analyst protecting ExamWorks’ healthcare-services systems and customer data. Managing vulnerabilities, firewalls, audits, security projects, and customer security support.
Senior Director Analyst – Infrastructure Cybersecurity
Sr Director Analyst in Infrastructure Cybersecurity providing actionable insights for clients at Gartner. Analyzing market trends and educating senior IT leaders on infrastructure security technologies.
Senior Security Analyst
Senior Security Analyst monitoring security alerts and threats for CompassMSP clients. Collaborating with teams to enhance client security and manage incident response effectively.
Cybersecurity Compliance Analyst
Cybersecurity Compliance Analyst supporting compliance and risk management activities across global and regional frameworks at Ford. Contributing to certification lifecycle management and regulatory reporting support.
Analyst II, Cybersecurity
Cybersecurity Analyst responsible for monitoring, analyzing, and reporting on cybersecurity activities and trends. Provide insights to enhance security controls and conduct vulnerability assessments.
Data and Information Security Analyst (Mid-level)
Data Security Analyst responsible for implementing DLP and Governance solutions at Solo Network Brasil. Focus on protecting corporate data and ensuring compliance with security regulations.
Senior Security Analyst
Senior Security Analyst at DigitalOcean leading the security monitoring program. Focused on advanced security monitoring, threat hunting, and detection engineering.
Security Analyst
Security Analyst for Infios focusing on application and AI security in supply chain software solutions. Collaborating with product teams to build robust security measures.
Senior Application Analyst – Epic Security
Senior Application Analyst managing healthcare IT solutions and supporting technology optimization for Intermountain Health. Collaborate with teams to enhance application performance with flexible work options.
Information Security Analyst III – Cyber Risk Management
Information Security Analyst III focusing on Cyber Risk Management. Engage in risk identification, tracking, and regulatory compliance for Central Ailos.
Information Security Analyst III – Offensive Security
Red Team activities for a cybersecurity specialist at Central Ailos. Focus on security, collaboration, and extensive opportunity in a cooperative financial environment.