Senior/Lead Cyber Threat Intelligence Specialist

Role & responsibilities

• 7+ years of experience in Cyber Threat Intelligence, Threat Research, Incident Response, Security Operations, or related cybersecurity disciplines.
• Demonstrated experience tracking threat actors, malware campaigns, adversary infrastructure, and emerging cyber threats.
• Strong understanding of threat intelligence tradecraft, intelligence lifecycle methodologies, and frameworks such as MITRE ATT&CK.
• Experience producing tactical, operational, and strategic intelligence products for technical and executive audiences.
• Familiarity with nation-state, sophisticated cyber-criminal groups and supply chain threats
• Experience in intelligence-driven hunting to spot suspicious activities in the network and identify potential risks
• Strong understanding of cyber threat intelligence frameworks and methodologies including MITRE ATT&CK, ATT&CK Navigator, Diamond Model, Cyber Kill Chain, STIX/TAXII, Intelligence Lifecycle, and Structured Analytic Techniques.
• Proven ability to independently conduct investigations, develop actionable intelligence, and brief stakeholders.
• Strong analytical, communication, and technical writing skills.

Desired Skills

• Experience with Threat Intelligence Platforms such as Anomali, ThreatQ, ThreatConnect, OpenCTI, MISP, or similar platforms.
• Proficiency with intelligence and OSINT tools such as Maltego, VirusTotal, Shodan, Censys, DomainTools, PassiveTotal, GreyNoise, URLScan, SecurityTrails, or similar investigative platforms.
• Knowledge of threat actor clustering methodologies used to track adversary campaigns, intrusion sets, and threat group activity.
• Experience conducting infrastructure analysis involving domains, DNS, passive DNS, IP addresses, ASNs, WHOIS records, certificates, hosting providers, and internet-facing assets.
• Familiarity with STIX/TAXII, YARA, Sigma, Snort, Suricata, malware analysis concepts, and intelligence automation techniques.
• Experience with Python, data mining, Elasticsearch, ELK Stack, Databricks, large-scale data analysis, and threat intelligence correlation workflows.
• Industry certifications such as GCTI, CTIA, GCIH, GCFA, CISSP, or equivalent cybersecurity and threat intelligence certifications.