Prioritize vulnerability remediation using exploitation likelihood, threat actor interest, and active exploitation data
Support red team, purple team, and adversary emulation exercises with current TTP and actor-based scenarios
Administer and tune the threat intelligence platform (TIP), including feed integration and IOC lifecycle management
Evaluate, onboard, and manage commercial and open-source intelligence feeds and vendor relationships
Maintain intelligence collection requirements and refine them based on stakeholder needs and changes in the threat landscape
Apply structured analytic techniques and the intelligence cycle to reduce bias and improve confidence levels in assessments
Build and maintain relationships with industry ISACs, law enforcement, and peer intelligence teams for information sharing
Contribute to the organization's threat intelligence strategy, standards, and playbooks
Train SOC, incident response, and vulnerability management teams on how to consume and apply intelligence products
Brief leadership on emerging threats, sector-specific risk, and geopolitical developments that may affect the organization
Qualifications
Required
3+ years of experience in threat intelligence, security operations, incident response, or a related security discipline
Bachelor's degree in Cybersecurity, Computer Science, Intelligence Studies, or related field, or equivalent experience
Working knowledge of MITRE ATT&CK, the intelligence cycle, and structured analytic techniques
Experience analyzing malware behavior, IOCs, and adversary infrastructure at a working level
Familiarity with SIEM, EDR, and threat intelligence platform tooling
Strong written and verbal communication skills, with the ability to translate technical findings for non-technical audiences
Ability to prioritize and manage multiple concurrent intelligence requirements under time pressure
Sound analytic judgment, including the ability to state confidence levels and acknowledge uncertainty in assessments
Preferred
Industry certifications such as GCTI, GCFA, CTIA, or CISSP
