About the company
This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Principal Cyber Threat Intelligence Analyst based in United States.
Responsibilities
- Monitor and analyze threat intelligence sources, internal telemetry, and relevant security data to identify emerging threats, tactics, campaigns, and threat actors.
- Collect, process, contextualize, and disseminate actionable intelligence to technical teams, business stakeholders, and senior leadership.
- Investigate malicious activity and unattributed threats, developing and testing hypotheses through research and data analysis.
- Identify gaps in threat detection and intelligence collection, recommend improvements, and participate in implementing solutions.
- Produce intelligence reports, technical briefings, and presentations tailored to audiences with different levels of technical knowledge and seniority.
- Collaborate with incident responders, threat emulation engineers, developers, and other security specialists to investigate incidents, determine root causes, and address control gaps.
- Develop security solutions for medium- to highly complex information security challenges and contribute subject matter expertise to strategic cybersecurity initiatives.
- Build and maintain relationships with external organizations and security communities to strengthen information sharing and collaboration.
- Research and operationalize emerging AI technologies to improve intelligence capabilities and address AI-enabled adversary techniques.
- Escalate significant issues with clear information on severity, exposure, and recommended actions while maintaining effective risk management practices.
- Serve as an information security subject matter expert by staying current with security technologies, concepts, and industry practices.
- Mentor junior analysts and contribute to a collaborative environment focused on continuously improving defensive capabilities.
Requirements
- Bachelor’s degree in Computer Science, Information Systems, or a related field, or equivalent relevant experience.
- 5–10 years of experience analyzing and investigating cybersecurity threats and related incidents.
- Strong understanding of the current cyber threat landscape and established Cyber Threat Intelligence principles, including indicator types, indicator pivoting, and attribution strength.
- Ability to research complex threats, formulate hypotheses, validate or disprove them using available data, and communicate conclusions clearly.
- Strong analytical, investigative, organizational, written, verbal communication, and technical briefing skills.
- Ability to work collaboratively with diverse security teams and stakeholders, with an empathetic and flexible approach.
- Motivation to investigate internal and open-source data to identify actionable threat information and strengthen security defenses.
- Demonstrated interest in researching and applying emerging AI technologies to counter evolving and AI-enabled adversary techniques.
- Experience working remotely with geographically distributed teams is a plus.
- Experience with network and host malware detection engineering is a plus.
- Knowledge of YARA, infrastructure tracking, reverse engineering, cyber-actor profiling, and indicator pivoting techniques is desirable.
- Experience tracking sophisticated cyber actors and understanding their tactics, techniques, procedures, and attribution characteristics is desirable.
- Scripting experience for automating investigative or analytical workflows is a plus.
- Contributions to the information security community through blogs, websites, published research, conference presentations, or similar activities are desirable.
Conditions
- Annual base salary range of $96,500–$207,500 USD, depending on factors such as experience, skills, education, and geographic location.
- Eligibility for incentive compensation based on organizational, business-unit, and/or individual performance.
- Comprehensive benefits designed to support physical, financial, emotional, and social well-being.
- Benefits programs supporting employees and their families.
- Virtual work arrangement.
- Opportunities to work on strategic cybersecurity initiatives and emerging AI technologies.
- Collaborative environment with opportunities for professional development and knowledge sharing.