Principal Cyber Threat Intelligence Analyst

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Principal Cyber Threat Intelligence Analyst based in United States.

This role is responsible for monitoring, analyzing, and contextualizing the evolving cyber threat landscape to strengthen organizational security. You will investigate threat intelligence from internal telemetry, open-source data, external providers, and trusted security communities. Your analysis will help identify malicious campaigns, threat actors, emerging tactics, and gaps in defensive capabilities. You will translate complex findings into actionable intelligence for technical teams, business stakeholders, and senior leadership. Working closely with incident responders, detection engineers, developers, and other security specialists, you will help improve detection and response capabilities. The role also provides opportunities to advance cyber intelligence maturity, explore emerging AI technologies, and mentor other analysts.

• Monitor and analyze threat intelligence sources, internal telemetry, and relevant security data to identify emerging threats, tactics, campaigns, and threat actors.
• Collect, process, contextualize, and disseminate actionable intelligence to technical teams, business stakeholders, and senior leadership.
• Investigate malicious activity and unattributed threats, developing and testing hypotheses through research and data analysis.
• Identify gaps in threat detection and intelligence collection, recommend improvements, and participate in implementing solutions.
• Produce intelligence reports, technical briefings, and presentations tailored to audiences with different levels of technical knowledge and seniority.
• Collaborate with incident responders, threat emulation engineers, developers, and other security specialists to investigate incidents, determine root causes, and address control gaps.
• Develop security solutions for medium- to highly complex information security challenges and contribute subject matter expertise to strategic cybersecurity initiatives.
• Build and maintain relationships with external organizations and security communities to strengthen information sharing and collaboration.
• Research and operationalize emerging AI technologies to improve intelligence capabilities and address AI-enabled adversary techniques.
• Escalate significant issues with clear information on severity, exposure, and recommended actions while maintaining effective risk management practices.
• Serve as an information security subject matter expert by staying current with security technologies, concepts, and industry practices.
• Mentor junior analysts and contribute to a collaborative environment focused on continuously improving defensive capabilities.

Requirements:

• Bachelor’s degree in Computer Science, Information Systems, or a related field, or equivalent relevant experience.
• 5–10 years of experience analyzing and investigating cybersecurity threats and related incidents.
• Strong understanding of the current cyber threat landscape and established Cyber Threat Intelligence principles, including indicator types, indicator pivoting, and attribution strength.
• Ability to research complex threats, formulate hypotheses, validate or disprove them using available data, and communicate conclusions clearly.
• Strong analytical, investigative, organizational, written, verbal communication, and technical briefing skills.
• Ability to work collaboratively with diverse security teams and stakeholders, with an empathetic and flexible approach.
• Motivation to investigate internal and open-source data to identify actionable threat information and strengthen security defenses.
• Demonstrated interest in researching and applying emerging AI technologies to counter evolving and AI-enabled adversary techniques.
• Experience working remotely with geographically distributed teams is a plus.
• Experience with network and host malware detection engineering is a plus.
• Knowledge of YARA, infrastructure tracking, reverse engineering, cyber-actor profiling, and indicator pivoting techniques is desirable.
• Experience tracking sophisticated cyber actors and understanding their tactics, techniques, procedures, and attribution characteristics is desirable.
• Scripting experience for automating investigative or analytical workflows is a plus.
• Contributions to the information security community through blogs, websites, published research, conference presentations, or similar activities are desirable.
• This position is not available for immigration sponsorship.

Benefits:

• Annual base salary range of $96,500–$207,500 USD, depending on factors such as experience, skills, education, and geographic location.
• Eligibility for incentive compensation based on organizational, business-unit, and/or individual performance.
• Comprehensive benefits designed to support physical, financial, emotional, and social well-being.
• Benefits programs supporting employees and their families.
• Virtual work arrangement.
• Opportunities to work on strategic cybersecurity initiatives and emerging AI technologies.
• Collaborative environment with opportunities for professional development and knowledge sharing.

We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.

We appreciate your interest and wish you the best!

Why Apply Through Jobgether?

Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.

#LI-CL1