Job Description

As a Senior Threat Intelligence Analyst, you will lead efforts to track state-sponsored APT campaigns, mentor peers, represent expertise externally, and support the Analyst-on-Demand service. This role involves proactive monitoring and in-depth research into threat actor infrastructure, tools, and TTPs, as well as the production of high-impact, client-driven finished intelligence.

Responsibilities

• Conduct proactive research on state-sponsored APT activity
• Establish and refine methods to track APT campaigns
• Hunt for threat actor infrastructure and activity
• Identify, prioritize, and deploy detection mechanisms
• Continuously evaluate and improve threat intelligence workflows
• Mentor colleagues on intrusion analysis and threat intelligence best practices
• Collaborate with geopolitical and regional analysis teams
• Propose and evaluate new data sources and analytical methods
• Represent Insikt Group externally
• Collaborate with engineering and data science teams
• Support customer intelligence needs through Analyst-on-Demand service

Requirements

• BA/BS or equivalent in related field
• 5+ years of experience in Information Security and/or Threat Intelligence
• Experience conducting technical threat analysis and research
• In-depth knowledge of TCP/IP and other networking protocols
• Demonstrated capability in identifying and tracking infrastructure
• Experience with static and dynamic malware analysis
• Proficiency in scripting (Python preferred)
• Fluency with common CTI research tools
• Proven experience applying structured analytical techniques
• Familiarity with threat modeling and adversary tracking frameworks
• Detailed understanding of existing APT groups’ past activities, TTPs, motivations, and targeting patterns
• Experience with open-source intelligence-gathering tools and techniques
• Experience working directly with customers
• Strong interpersonal and teamwork skills

Benefits

• No benefits