Cyber Threat Intelligence Analyst

Threat Intelligence Analyst - Early Career

Role Overview

The Threat Intelligence (TI) Analyst supports the collection, analysis, and dissemination of cyber threat intelligence to improve ADI's ability to anticipate, detect, and respond to cyber threats. Working closely with the SOC, Incident Response, Detection Engineering, and Cyber Defence teams, this role helps identify emerging threats, track adversary activity, and translate intelligence into practical defensive actions. This is an early-career role intended for individuals looking to build expertise in cyber threat intelligence, adversary analysis, threat hunting, and intelligence-driven defence.

Key Responsibilities

• Collect and analyse cyber threat intelligence from open-source, deep web, dark web, commercial, vendor, and industry sources.
• Monitor emerging threats, vulnerabilities, malware campaigns, credential exposures, data leaks and threat actor activity relevant to ADI.
• Support the creation and distribution of threat intelligence briefings, reports, and summaries for technical and non-technical audiences.
• Maintain awareness of threat actor tactics, techniques, and procedures (TTPs) using frameworks such as MITRE ATT&CK.
• Assist SOC and Incident Response teams by providing contextual intelligence during security investigations.
• Identify indicators of compromise (IOCs) and support operationalisation into security tools and detection platforms.
• Support proactive threat hunting activities by identifying relevant threats and hypotheses for investigation.
• Track industry and sector-specific threats affecting semiconductor, manufacturing, cloud, and enterprise environments.
• Assist with intelligence requirements gathering and mapping threats to business risks.
• Maintain threat intelligence documentation, repositories, watchlists, and reporting dashboards.
• Participate in tabletop exercises, purple-team activities, and lessons-learned reviews to improve defensive readiness.
• Contribute to continuous improvement of threat intelligence processes and intelligence sharing practices.
• Assist the SOC in the triage, investigation, and response of security alerts, incidents, and escalations
• Maintain flexibility to support global cybersecurity operations, including participation in management meetings, vendor engagements, support calls, incident response activities, and after-hours escalations across multiple time zones as needed.

Required Qualifications

• Bachelor's degree in Cybersecurity, Intelligence, Computer Science, Information Technology, or equivalent experience.
• 1-3 years experience in cybersecurity, IT operations, intelligence analysis, SOC operations, or related technical field.
• Understanding of cybersecurity fundamentals including phishing, malware, ransomware, business email compromise, and common attack techniques.
• Experience conducting threat intelligence collection and monitoring across open-source, deep web, and dark web sources to identify emerging threats, threat actors, compromised credentials, and organizational risks.
• Basic understanding of threat intelligence concepts including IOCs, threat actors, TTPs, and intelligence lifecycle principles.
• Strong analytical thinking, curiosity, and research skills.
• Ability to identify patterns, connect information from multiple sources, and communicate findings clearly.
• Strong written and verbal communication skills.

Preferred Qualifications

• Experience leveraging AI, generative AI, and agentic security capabilities to enhance threat detection, investigation, response, and SOC operational efficiency.
• Knowledge of the MITRE ATT&CK framework.
• Experience with intelligence platforms, security monitoring tools, threat feeds, or OSINT research tools.
• Basic scripting or data analysis experience using Python, KQL, PowerShell, SQL, or similar technologies.
• CompTIA Security+, CySA+, SC-200, CTI-related certifications, or equivalent qualifications.
• Experience with threat hunting, CTFs, internships, malware analysis labs, or cyber research projects.

Success Measures

• Timely delivery of threat intelligence briefings and reports.
• Quality and relevance of intelligence provided to SOC and Incident Response teams.
• Contribution to detection improvements through intelligence-driven recommendations.
• Identification and tracking of emerging threats relevant to ADI.
• Accurate maintenance of intelligence repositories, watchlists, and threat documentation.

For positions requiring access to technical data, Analog Devices may have to obtain export licensing approval from relevant authorities. Applicants may have to go through an export licensing review process.

Job Type: Experienced

Travel: Yes, 10% of the time

Shift Type: 1st Shift/Days

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.