Cybersecurity Threat Intelligence Specialist

About the role

The Cybersecurity Threat Intelligence Specialist is responsible for detecting, assessing, and mitigating cyber threats to protect the organization’s information assets. This role gathers intelligence from multiple sources, transforms it into actionable insights, and supports proactive defense and incident response activities.

Key responsibilities

• Collect threat intelligence from open sources, dark‑web forums, and commercial feeds.
• Analyze data to identify patterns, trends, and indicators of compromise (IOCs).
• Correlate external intelligence with internal security events and incidents.
• Produce timely, detailed threat intelligence reports and briefings for internal and external stakeholders.
• Provide actionable intelligence to guide preventive security measures and enhance detection strategies.
• Support security incidents by supplying context on threat actors, tactics, techniques, and procedures (TTPs).
• Collaborate with SOC analysts, incident responders, and forensic experts to improve monitoring and response capabilities.
• Stay current on emerging threats, tools, and best practices, recommending improvements to the threat intelligence program.

Required profile

• Strong understanding of cyber threat actors, attack vectors, and mitigation strategies.
• Ability to work effectively with cross‑functional teams and external partners.
• Clear communication skills for delivering concise intelligence reports and briefings.
• Experience guiding and reviewing the work of junior analysts.

Required skills

• Threat intelligence collection and analysis
• Open‑source intelligence (OSINT) techniques
• Dark‑web monitoring
• Indicator of compromise (IOC) identification
• Knowledge of TTP frameworks (e.g., MITRE ATT&CK)
• Report writing and briefing preparation