Security Analyst

Position Summary (Summary of the Role)You track, analyze, and report on threat actors, campaigns, and emerging attack techniques relevant to the organization and its industry. You turn raw indicators and open-source, commercial, and internal telemetry into intelligence that Security Operations, Incident Response, Vulnerability Management, and executive stakeholders can act on. You maintain the organization's understanding of its adversaries, attack surface exposure, and threat landscape, and you help prioritize defenses based on likelihood and impact.Key Responsibilities Collect and analyze threat intelligenceMonitor open-source intelligence (OSINT), closed forums, dark web sources, ISAC/ISAO feeds, and commercial threat feeds for relevant activityTrack threat actor groups, campaigns, malware families, and TTPs mapped to MITRE ATT&CKAnalyze indicators of compromise (IOCs), malware samples, and adversary infrastructure to assess relevance and riskCorrelate external threat data with internal telemetry, logs, and detections to identify targeting or exposureProduce and disseminate finished intelligenceWrite finished intelligence products, including threat advisories, actor profiles, campaign briefs, and trend reportsDeliver tailored intelligence briefings to SOC analysts, incident responders, and executive and board-level stakeholdersMaintain a prioritized threat landscape view specific to the organization's industry, geography, and technology stackTrack and report on threat intelligence program KPIs, such as report timeliness, actionability, and stakeholder feedbackSupport detection, response, and vulnerability prioritizationTranslate intelligence into detection logic, hunting hypotheses, and SIEM/EDR content in partnership with detection engineeringProvide threat context during incident response to support scoping, attribution, and containment decisionsPrioritize vulnerability remediation using exploitation likelihood, threat actor interest, and active exploitation dataSupport red team, purple team, and adversary emulation exercises with current TTP and actor-based scenariosManage intelligence infrastructure and sourcesAdminister and tune the threat intelligence platform (TIP), including feed integration and IOC lifecycle managementEvaluate, onboard, and manage commercial and open-source intelligence feeds and vendor relationshipsMaintain intelligence collection requirements and refine them based on stakeholder needs and changes in the threat landscapeApply structured analytic techniques and the intelligence cycle to reduce bias and improve confidence levels in assessmentsProgram and stakeholder engagementBuild and maintain relationships with industry ISACs, law enforcement, and peer intelligence teams for information sharingContribute to the organization's threat intelligence strategy, standards, and playbooksTrain SOC, IR, and Vulnerability Management teams on how to consume and apply intelligence productsBrief leadership on emerging threats, sector-specific risk, and geopolitical developments that may affect the organizationExpectationsThis is a full-time, on-site position based in Irving, TX.Occasional after-hours support may be required.Years of Experience3+ years of experience in threat intelligence, security operations, incident response, or a related security disciplineRequired Qualifications (Non-Negotiable) Bachelor's degree in Cybersecurity, Computer Science, Intelligence Studies, or related field, or equivalent experienceWorking knowledge of MITRE ATT&CK, the intelligence cycle, and structured analytic techniquesExperience analyzing malware behavior, IOCs, and adversary infrastructure at a working levelFamiliarity with SIEM, EDR, and threat intelligence platform toolingStrong written and verbal communication skills, with the ability to translate technical findings for non-technical audiencesAbility to prioritize and manage multiple concurrent intelligence requirements under time pressureSound analytic judgment, including the ability to state confidence levels and acknowledge uncertainty in assessmentsEducation & Certification RequirementsBachelor’s degree in Cybersecurity, Intelligence Studies, or related fieldIndustry certifications such as GCTI, GCFA, CTIA, or CISSP