Threat Intelligence Analyst

About the job

Our Irving, TX Client is seeking a Threat Intelligence Analyst for a 12+ month contract opportunity. Onsite 5x a week.

• Monitor open-source intelligence (OSINT), closed forums, dark web sources, ISAC/ISAO feeds, and commercial threat feeds for relevant activity
• Track threat actor groups, campaigns, malware families, and TTPs mapped to MITRE ATT&CK
• Analyze indicators of compromise (IOCs), malware samples, and adversary infrastructure to assess relevance and risk
• Correlate external threat data with internal telemetry, logs, and detections to identify targeting or exposure

Produce and disseminate finished intelligence

• Write finished intelligence products, including threat advisories, actor profiles, campaign briefs, and trend reports
• Deliver tailored intelligence briefings to SOC analysts, incident responders, and executive and board-level stakeholders
• Maintain a prioritized threat landscape view specific to the organization's industry, geography, and technology stack
• Track and report on threat intelligence program KPIs, such as report timeliness, actionability, and stakeholder feedback

Support detection, response, and vulnerability prioritization

• Translate intelligence into detection logic, hunting hypotheses, and SIEM/EDR content in partnership with detection engineering
• Provide threat context during incident response to support scoping, attribution, and containment decisions
• Prioritize vulnerability remediation using exploitation likelihood, threat actor interest, and active exploitation data
• Support red team, purple team, and adversary emulation exercises with current TTP and actor-based scenarios

Manage intelligence infrastructure and sources

• Administer and tune the threat intelligence platform (TIP), including feed integration and IOC lifecycle management
• Evaluate, onboard, and manage commercial and open-source intelligence feeds and vendor relationships
• Maintain intelligence collection requirements and refine them based on stakeholder needs and changes in the threat landscape
• Apply structured analytic techniques and the intelligence cycle to reduce bias and improve confidence levels in assessments

Program and stakeholder engagement

• Build and maintain relationships with industry ISACs, law enforcement, and peer intelligence teams for information sharing
• Contribute to the organization's threat intelligence strategy, standards, and playbooks
• Train SOC, IR, and Vulnerability Management teams on how to consume and apply intelligence products
• Brief leadership on emerging threats, sector-specific risk, and geopolitical developments that may affect the organization

Years of Experience

• 3+ years of experience in threat intelligence, security operations, incident response, or a related security discipline

Required Qualifications (Non-Negotiable)

• Bachelor's degree in Cybersecurity, Computer Science, Intelligence Studies, or related field, or equivalent experience
• Working knowledge of MITRE ATT&CK, the intelligence cycle, and structured analytic techniques
• Experience analyzing malware behavior, IOCs, and adversary infrastructure at a working level
• Familiarity with SIEM, EDR, and threat intelligence platform tooling
• Strong written and verbal communication skills, with the ability to translate technical findings for non-technical audiences
• Ability to prioritize and manage multiple concurrent intelligence requirements under time pressure
• Sound analytic judgment, including the ability to state confidence levels and acknowledge uncertainty in assessments

Education & Certification Requirements

• Bachelor’s degree in Cybersecurity, Intelligence Studies, or related field
• Industry certifications such as GCTI, GCFA, CTIA, or CISSP