Senior Associate Threat Intelligence

Job Summary

We are seeking a highly motivated and analytical Threat Intelligence Analyst with 3-5 years of experience in Cyber Threat Intelligence (CTI), Threat Hunting, and Security Operations. The ideal candidate will be responsible for identifying, analyzing, and reporting emerging cyber threats, threat actors, attack techniques, vulnerabilities, and campaigns that could impact the organization. This role requires close collaboration with Security Operations Center (SOC), Incident Response, Vulnerability Management, and Engineering teams to transform threat intelligence into actionable insights that strengthen the organization's security posture.

The successful candidate should possess hands-on experience with threat intelligence platforms, SIEM technologies, threat hunting methodologies, MITRE ATT&CK framework, and open-source intelligence (OSINT) techniques. The role demands strong analytical skills, technical expertise, and the ability to communicate complex cybersecurity threats to both technical and non-technical stakeholders.

Key Responsibilities

1.Monitor, research, and analyze cyber threats, threat actors, malware campaigns, and emerging attack trends affecting the organization.
2.Collect, correlate, and evaluate intelligence from multiple sources including OSINT, commercial intelligence feeds, dark web monitoring platforms, and internal security telemetry.

1. Conduct proactive threat hunting activities across endpoints, networks, cloud environments, and security platforms.
2. Identify and validate Indicators of Compromise (IOCs), Indicators of Attack (IOAs), and Tactics, Techniques, and Procedures (TTPs).
3. Leverage the MITRE ATT&CK framework to map adversary behaviors and improve detection capabilities.

Produce actionable intelligence reports, executive summaries, threat advisories, and situational awareness briefings.
6.Support incident response investigations by providing threat intelligence context, attack attribution, and remediation recommendations.

1. Analyze malware samples and threat actor methodologies to understand attack patterns and potential business impact.
2. Develop and maintain detection use cases, threat hunting queries, Sigma rules, and correlation rules.

Monitor dark web forums, underground marketplaces, and external threat sources for risks targeting organizational assets.

1. Collaborate with SOC analysts, security engineers, vulnerability management teams, and business stakeholders to improve cyber defense strategies.
2. Utilize threat intelligence platforms such as MISP, ThreatConnect, Recorded Future, Anomali, or similar technologies for intelligence management and enrichment.
3. Stay current with cybersecurity trends, threat landscapes, vulnerabilities, and industry best practices.

Required Skills & Qualifications

1. Strong understanding of cyber threat intelligence lifecycle and intelligence-driven security operations.
2. Experience with SIEM solutions such as Microsoft Sentinel, Splunk, QRadar, or ArcSight.
3. Proficiency in Microsoft Defender XDR, Defender for Endpoint, and cloud security monitoring tools.
4. Knowledge of MITRE ATT&CK, Cyber Kill Chain, Diamond Model, and NIST Cybersecurity Framework.
5. Hands-on experience with OSINT investigations and threat intelligence platforms.
6. Familiarity with malware analysis concepts, network traffic analysis, endpoint investigations, and log correlation.
7. Experience with STIX/TAXII, IOC management, and threat intelligence sharing mechanisms.
8. Working knowledge of Python, PowerShell, KQL, YARA, or Sigma rules.