Senior Security Analyst - Threat Intelligence

You are someone who thrives in a high-performance environment, bringing a growth mindset and entrepreneurial spirit to tackle meaningful challenges that have a real impact. In return for your drive, determination, and curiosity, we’ll provide the resources, mentorship, and opportunities to help you quickly broaden your expertise, grow into a well-rounded professional, and contribute to work that truly makes a difference. When you join us, you will have: Continuous learning: Our learning and apprenticeship culture, backed by structured programs, is all about helping you grow while creating an environment where feedback is clear, actionable, and focused on your development. The real magic happens when you take the input from others to heart and embrace the fast-paced learning experience, owning your journey. A voice that matters: From day one, we value your ideas and contributions. You’ll make a tangible impact by offering innovative ideas and practical solutions, all while upholding our unwavering commitment to ethics and integrity. We not only encourage diverse perspectives, but they are critical in driving us toward the best possible outcomes. Global community: With colleagues across 65+ countries and over 100 different nationalities, our firm’s diversity fuels creativity and helps us come up with the best solutions. Plus, you’ll have the opportunity to learn from exceptional colleagues with diverse backgrounds and experiences. Exceptional benefits: On top of a competitive salary (based on your location, experience, and skills), we provide a comprehensive benefits package to enable holistic well-being for you and your family. You will connect external threat activity to the firm’s business, technology, and risk environment, turning raw intelligence into insights that Security Operations, Incident Response, Vulnerability Management, Engineering, investigations, and leadership can act on. Your role is to help close the gap between what is happening in the external threat landscape and how the firm should respond. You will analyze adversary activity, campaigns, geopolitical developments, cybercrime trends, vulnerabilities, and emerging technologies; assess how those threats intersect with the firm’s assets and priorities; and translate that analysis into timely operational and strategic intelligence. Working closely with Insider Risk, Digital Forensics, Technology Operations, Vulnerability Management, Security Operations, Engineering, and other stakeholders, you will begin by analyzing threat actors, campaigns, and emerging risks. This involves tracking nation-state activity, cybercrime trends, adversary campaigns, geopolitical developments, emerging technologies, and relevant industry reporting to identify threats with potential implications for the firm. From there, you will connect this external intelligence to internal exposure by researching adversary tactics, techniques, and procedures, then mapping them to the firm’s technologies, assets, vulnerabilities, and business context using frameworks such as MITRE ATT&CK. Through this process, you will identify areas of potential exposure and surface material findings for action or senior review. With these insights, you will produce actionable intelligence by developing timely intelligence products for technical and leadership audiences, including threat assessments, daily threat summaries, indicator reporting, campaign tracking, and strategic intelligence products that clearly articulate relevance, potential impact, confidence, and recommended action. You will then translate this intelligence into operational action by partnering with Security Operations, Incident Response, Vulnerability Management, Detection Engineering, Insider Risk, Digital Forensics, and other teams to enrich incidents with threat context. This collaboration will help turn intelligence into hunt hypotheses, detections, investigations, vulnerability and remediation priorities, and other protective actions. Additionally, you will support active investigations and response by providing threat research, attribution context, indicators, TTP analysis, and external intelligence during significant investigations and security events, helping teams understand what they are seeing and what additional activity they should look for. Beyond immediate incidents, you will strengthen intelligence integration across Cyber by building trusted working relationships across i2, the CISO organization, and the broader Digital Trust Organization, ensuring that intelligence is actively incorporated into security operations and risk decisions rather than remaining a standalone reporting function. To enhance these operations, you will modernize intelligence workflows by using AI, automation, scripting, data analysis, and modern analytical techniques to improve intelligence collection, enrichment, correlation, analysis, and dissemination while reducing repetitive manual effort. Finally, you will continuously improve the Threat Intelligence capability by identifying opportunities to enhance intelligence sources, analytical methods, workflows, products, and integrations based on stakeholder needs and changing threats. Ultimately, your work will help the firm identify relevant threats earlier, understand why they matter, and convert intelligence into action before risk materializes. Every assessment, TTP mapping, hunt hypothesis, and intelligence product should sharpen the firm’s ability to anticipate and respond to threats.

Bachelor’s degree or equivalent practical experience 2+ years of experience in Cyber Threat Intelligence, Security Operations, Incident Response, Security Research, Intelligence Analysis, or a related cybersecurity field. Relevant internships, government/military experience, or other directly applicable experience may also be considered Foundational understanding of cybersecurity concepts, common threat actors, adversary tactics, techniques and procedures (TTPs), and the cyber threat landscape Familiarity with threat-intelligence concepts and frameworks such as MITRE ATT&CK and an interest in developing deeper expertise in intelligence analysis Strong analytical and research skills, including the ability to work across multiple information sources, identify relevant patterns, and distinguish meaningful findings from background noise Ability to synthesize technical information into clear, concise written analysis and explain what happened, why it matters, and what action may be appropriate Ability to work collaboratively with colleagues across cybersecurity disciplines and an interest in learning how Threat Intelligence supports Security Operations, Incident Response, Vulnerability Management, Digital Forensics, Insider Risk, and Engineering Curiosity and willingness to independently investigate unfamiliar threats, technologies, or technical concepts and develop expertise over time Familiarity with threat-intelligence platforms, OSINT, security tooling, scripting, data analysis, automation, or AI-enabled workflows is helpful but not required Strong attention to detail, sound judgment, and comfort working in an environment where information may be incomplete or ambiguous A growth mindset and interest in helping improve how Threat Intelligence is collected, analyzed, communicated, and translated into action Strong written and verbal communication skills and an ability to tailor analysis to both technical and non-technical audiences