Security Analyst

You track, analyze, and report on threat actors, campaigns, and emerging attack techniques relevant to the organization and its industry. You turn raw indicators and open-source, commercial, and internal telemetry into intelligence that Security Operations, Incident Response, Vulnerability Management, and executive stakeholders can act on. You maintain the organization's understanding of its adversaries, attack surface exposure, and threat landscape, and you help prioritize defenses based on likelihood and impact.

Key Responsibilities

Collect and analyze threat intelligence

Monitor open-source intelligence (OSINT), closed forums, dark web sources, ISAC/ISAO feeds, and commercial threat feeds for relevant activity

Track threat actor groups, campaigns, malware families, and TTPs mapped to MITRE ATT&CK

Analyze indicators of compromise (IOCs), malware samples, and adversary infrastructure to assess relevance and risk

Correlate external threat data with internal telemetry, logs, and detections to identify targeting or exposure

Produce and disseminate finished intelligence

Write finished intelligence products, including threat advisories, actor profiles, campaign briefs, and trend reports

Deliver tailored intelligence briefings to SOC analysts, incident responders, and executive and board-level stakeholders

Maintain a prioritized threat landscape view specific to the organization's industry, geography, and technology stack

Track and report on threat intelligence program KPIs, such as report timeliness, actionability, and stakeholder feedback

Support detection, response, and vulnerability prioritization

Translate intelligence into detection logic, hunting hypotheses, and SIEM/EDR content in partnership with detection engineering

Provide threat context during incident response to support scoping, attribution, and containment decisions

Prioritize vulnerability remediation using exploitation likelihood, threat actor interest, and active exploitation data

Support red team, purple team, and adversary emulation exercises with current TTP and actor-based scenarios

Manage intelligence infrastructure and sources

Administer and tune the threat intelligence platform (TIP), including feed integration and IOC lifecycle management

Evaluate, onboard, and manage commercial and open-source intelligence feeds and vendor relationships

Maintain intelligence collection requirements and refine them based on stakeholder needs and changes in the threat landscape

Apply structured analytic techniques and the intelligence cycle to reduce bias and improve confidence levels in assessments

Program and stakeholder engagement

Build and maintain relationships with industry ISACs, law enforcement, and peer intelligence teams for information sharing

Contribute to the organization's threat intelligence strategy, standards, and playbooks

Train SOC, IR, and Vulnerability Management teams on how to consume and apply intelligence products

Brief leadership on emerging threats, sector-specific risk, and geopolitical developments that may affect the organization

This is a full-time, on-site position based in Irving, TX.

Occasional after-hours support may be required.

Years of Experience

3+ years of experience in threat intelligence, security operations, incident response, or a related security discipline

Required Qualifications (Non-Negotiable)

Bachelor's degree in Cybersecurity, Computer Science, Intelligence Studies, or related field, or equivalent experience

Working knowledge of MITRE ATT&CK, the intelligence cycle, and structured analytic techniques

Experience analyzing malware behavior, IOCs, and adversary infrastructure at a working level

Familiarity with SIEM, EDR, and threat intelligence platform tooling

Strong written and verbal communication skills, with the ability to translate technical findings for non-technical audiences

Ability to prioritize and manage multiple concurrent intelligence requirements under time pressure

Sound analytic judgment, including the ability to state confidence levels and acknowledge uncertainty in assessments

Education & Certification Requirements

Bachelor’s degree in Cybersecurity, Intelligence Studies, or related field

Industry certifications such as GCTI, GCFA, CTIA, or CISSP

#J-18808-Ljbffr