Search Remote Jobs

Threat Intelligence Analyst

🔥 0 minutes ago

🇺🇸 United States – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

🔐 Security Analyst

Where this job comes from

Posted on Blackthorne Consulting's careers page, not through a job board

First seen by Remote Rocketship 0 minutes ago

Logo of Blackthorne Consulting

Blackthorne Consulting

11 - 50 employees

🔒 Cybersecurity

💼 Consulting

🤖 Artificial Intelligence

Cybersecurity • Consulting • Artificial Intelligence

Blackthorne Consulting is a Bellevue-based cybersecurity consulting firm that delivers outcome-focused technical security engineering, incident response, and SOC enablement. They specialize in AI security (securely accelerating enterprise AI and enabling SOC with AI), cloud security (assessments and remediation for AWS, Azure, Google Cloud, Salesforce, Snowflake), threat management and threat detection, SIEM and security data initiatives, offensive security (nation-state emulation and advanced penetration testing), and security operations automation. The team emphasizes data-driven analysis, tailored, tool-stack-native solutions, and brings operational experience from the U. S. Department of Defense, Fortune 100 companies (e. g. , Microsoft, GE), Big 4 consulting, healthcare, and financial services.

📋 Description

• Collect data, research threats, analyze data, and create actionable insights for key stakeholders • Improve enterprise detection, response, and risk awareness • Identify collection opportunities and track adversary activity • Investigate campaigns and create scripts and tooling to deliver analysis at scale • Conduct threat intelligence research on adversary groups, campaigns, emerging threat techniques, malware families, and attack infrastructure • Perform high-interaction analysis of phishing campaigns, command-and-control infrastructure, and attacker tooling • Develop automation pipelines to collect, normalize, and enrich threat intelligence data • Maintain internal intelligence repositories and campaign tracking systems • Build and maintain basic APIs integrating with enterprise security platforms • Evaluate threat intelligence feeds and data sources for timeliness, reliability, and relevancy • Produce threat intelligence reports and campaign analyses • Deliver technical briefings to security teams and executive stakeholders • Support incident investigations with adversary context and attribution insights • Assess client threat intelligence functions and develop actionable improvement roadmaps • Provide inputs to detection engineering, threat hunt, and adversary emulation teams

🎯 Requirements

• 4+ years experience in threat intelligence • 2+ years experience writing analysis scripts or other applicable automation • 2+ years experience with sandboxes and sandboxing technology • 2+ years experience tracking criminal threat actors • Experience analyzing adversary tactics and campaigns • Familiarity with enterprise attack techniques • Experience producing technical intelligence reports • Ability to translate threat intel insights into actionable threat detection, threat hunt, or other control recommendations • 2+ years experience working as a threat intelligence analyst in a professional organization (preferred) • Demonstrated track record of open source contributions or conference talks related to automated analysis of threat data, sandboxing or other related topics (preferred) • Malware analysis experience, including experience writing and maintaining Yara signatures (preferred) • Experience tracking nation-state actors (preferred) • Experience with threat intelligence platforms such as MISP and OpenCTI (preferred) • Python or other scripting experience (preferred)

Apply Now

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Similar Jobs

🔥 6 hours ago

Recorded Future

501 - 1000

💼 Consulting

🎖️ Defense

📦 Logistics

Senior threat intelligence analyst researching dark-web cybercrime and threat actors for Recorded Future, an intelligence company. Producing actionable reports using OSINT, AI, cryptocurrency investigations, and underground-source engagement.

🗣️🇷🇺 Russian Required

🔥 9 hours ago

SMX

1001 - 5000

💼 Consulting

📦 Logistics

🎖️ Defense

Cloud Security Analyst monitoring and mitigating threats across customer cloud infrastructures. Supporting SMX managed security services through security operations, incident response, and monitoring.

🔥 10 hours ago

NuHarbor Security

51 - 200

💼 Consulting

🏥 Healthcare

🎖️ Defense

Security Analyst monitoring alerts and investigating incidents for nuHarbor’s managed cybersecurity services. Executing containment, documenting findings, and escalating risks to clients and internal teams.

🔥 10 hours ago

Cherokee Federal

5001 - 10000

🏥 Healthcare

📦 Logistics

🏭 Manufacturing

Senior Cybersecurity Analyst developing disaster recovery and continuity plans for NSF. Supporting federal cybersecurity compliance, risk assessments, and service recovery.

🔥 15 hours ago

CareMetx, LLC

501 - 1000

💼 Consulting

🏥 Healthcare

⚕️ Healthcare Insurance

Senior Information Security Analyst securing CareMetx’s specialty-patient access healthcare technology services. Managing compliance, vulnerabilities, incident response, audits, vendors, and cloud security.

Developed by Lior Neu-ner. I'd love to hear your feedback — Get in touch via DM or support@remoterocketship.com
Follow Remote Rocketship on LinkedInFollow Remote Rocketship on InstagramFollow Remote Rocketship on FacebookFollow Remote Rocketship on TikTok