Threat Intelligence Analyst

This is a 12+ month contract position for a Threat Intelligence Analyst located in Irving, Texas. You will track threat actors, campaigns, and malware families; analyze indicators of compromise and adversary infrastructure; and produce finished intelligence products to support the organization's security operations, incident response, and vulnerability management efforts.

Responsibilities

• Track threat actor groups, campaigns, malware families, and tactics, techniques, and procedures (TTPs) mapped to MITRE ATT&CK
• Analyze indicators of compromise (IOCs), malware samples, and adversary infrastructure to assess relevance and risk
• Correlate external threat data with internal telemetry, logs, and detections to identify targeting or exposure
• Produce and disseminate finished intelligence products, including threat advisories, actor profiles, campaign briefs, and trend reports
• Deliver tailored intelligence briefings to SOC analysts, incident responders, and executive and board-level stakeholders
• Maintain a prioritized threat landscape view specific to the organization's industry, geography, and technology stack
• Track and report on threat intelligence program KPIs, such as report timeliness, actionability, and stakeholder feedback
• Translate intelligence into detection logic, hunting hypotheses, and SIEM/EDR content in partnership with detection engineering
• Provide threat context during incident response to support scoping, attribution, and containment decisions
• Prioritize vulnerability remediation using exploitation likelihood, threat actor interest, and active exploitation data
• Support red team, purple team, and adversary emulation exercises with current TTP and actor-based scenarios
• Administer and tune the threat intelligence platform (TIP), including feed integration and IOC lifecycle management
• Evaluate, onboard, and manage commercial and open-source intelligence feeds and vendor relationships
• Maintain intelligence collection requirements and refine them based on stakeholder needs and changes in the threat landscape
• Apply structured analytic techniques and the intelligence cycle to reduce bias and improve confidence levels in assessments
• Build and maintain relationships with industry ISACs, law enforcement, and peer intelligence teams for information sharing
• Contribute to the organization's threat intelligence strategy, standards, and playbooks
• Train SOC, incident response, and vulnerability management teams on how to consume and apply intelligence products
• Brief leadership on emerging threats, sector-specific risk, and geopolitical developments that may affect the organization

Qualifications

• Required

• 3+ years of experience in threat intelligence, security operations, incident response, or a related security discipline

• Bachelor's degree in Cybersecurity, Computer Science, Intelligence Studies, or related field, or equivalent experience

• Working knowledge of MITRE ATT&CK, the intelligence cycle, and structured analytic techniques

• Experience analyzing malware behavior, IOCs, and adversary infrastructure at a working level

• Familiarity with SIEM, EDR, and threat intelligence platform tooling

• Strong written and verbal communication skills, with the ability to translate technical findings for non-technical audiences

• Ability to prioritize and manage multiple concurrent intelligence requirements under time pressure

• Sound analytic judgment, including the ability to state confidence levels and acknowledge uncertainty in assessments

• Preferred

• Industry certifications such as GCTI, GCFA, CTIA, or CISSP