Threat Intelligence Analyst

Job not on LinkedIn

🔥 0 minutes ago

🇺🇸 United States – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

🔐 Security Analyst

👻 Ghost score 12%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Team Cymru

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 1998

💼 Consulting

🏥 Healthcare

🔒 Cybersecurity

💰 Private equity on 2021-09

Consulting • Healthcare • Cybersecurity

Team Cymru is a cybersecurity company that delivers real-time, internet-scale threat intelligence and network visibility to defenders of critical infrastructure. They analyze raw NetFlow and global internet activity to provide passive asset discovery, actionable threat feeds, botnet and malware analysis, DDoS mitigation, and incident-response support (CSIRT). Their products integrate with SIEM, SOAR, and TIP platforms and are offered as feeds, APIs, and managed services to enterprise and security operations teams.

📋 Description

• Conduct proactive research into threat actors, malware families, campaigns, and evolving TTPs • Investigate and present operational and strategic intelligence on threat actors, including attribution, motivation, capability, and geopolitical context • Lead short- and long-term threat tracking projects • Identify intelligence gaps and propose targeted research to address collection shortfalls • Evaluate tools, methodologies, and best practices for understanding adversary TTPs • Perform network traffic and infrastructure analysis using Team Cymru's global dataset • Analyze PCAP, NetFlow, passive DNS, open ports, certificates, and other datasets • Map malicious infrastructure and identify related threat actor assets • Identify and refine IOCs and threat actor TTPs, translating them into automated tracking mechanisms • Receive, triage, and respond to customer requests with timely technical threat intelligence reports • Produce intelligence tailored to customer threat landscapes and requirements • Ensure intelligence products meet analytic standards, including clear structure, estimative language, confidence levels, and actionable conclusions • Conduct peer review of colleagues' reporting • Collaborate on analytical tools, data analytics systems, research methodologies, and automation capabilities • Support threat detection and data acquisition teams with signature development and telemetry collection priorities • Participate in working groups, industry events, and community collaboration as a Team Cymru representative

🎯 Requirements

• 5+ years of experience as a threat intelligence analyst, network forensics analyst, or IT security analyst • Bachelor's degree in Computer Science, Computer Engineering, Cybersecurity, or equivalent is preferably required/desired • Exceptional oral and written communication skills • Ability to produce customer-facing intelligence reports under time pressure • Experience using structured analysis techniques, estimative language, and confidence levels • Proven track record of leading complex analytical projects or investigations • Ability to manage multiple concurrent work streams • Strong analytical, deductive reasoning, and critical thinking skills • Ability to work effectively within a distributed, remote team environment • Experience tracking APT, nation-state, or cybercriminal actors • Network infrastructure and traffic analysis skills: PCAP, NetFlow, PDNS, open ports, and certificates • Deep knowledge of IP networking and internet services, including DNS, HTTP/HTTPS, TLS, VPNs, and BGP • Knowledge of operating system concepts, indicators of compromise, and host- and network-level detection architectures • Working proficiency in SQL and querying/analyzing large disparate datasets • Familiarity with OSINT platforms and research techniques • Occasional local and international travel required • Highly desirable: regional or threat actor subject matter expertise, Python, public speaking, AI systems, Linux server management, malware analysis, YARA, Zeek, Suricata, sandbox reporting, malware reverse engineering, Ghidra, IDA Pro, x64dbg, and hosting provider/ISP/internet exchange operations

🏖️ Benefits

• Collaborative, mission-driven culture • Remote position • Occasional local and international travel for customer workshops, industry events, and team meetings • Participation in exclusive industry conferences, working groups, industry events, and community collaboration • Equal opportunity employer

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume