threat intelligence analyst

Alignerr

<div>
 <strong>
  About The Job
  <br/>
  <br/>
 </strong>
 At Alignerr, we partner with the world&rsquo;s leading AI research teams and labs to build and train cutting-edge AI models.
 <br/>
 <br/>
 We&rsquo;re looking for analysts who understand adversaries, campaigns, and real-world threat-intelligence workflows. You will work with realistic reporting, indicators, and attack narratives to help model how threats are tracked, analyzed, and communicated in practice.
 <br/>
 <br/>
 <strong>
  Organization
 </strong>
 : Alignerr
 <strong>
  Position
 </strong>
 : Threat Intelligence Analyst
 <strong>
  Type
 </strong>
 : Contract / Task-Based
 <strong>
  Compensation
 </strong>
 : $35&ndash;$60 /hour
 <strong>
  Location
 </strong>
 : Remote
 <strong>
  Commitment
 </strong>
 : 10&ndash;40 hours/week
 <br/>
 <br/>
 <strong>
  What You&rsquo;ll Do
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Analyze and classify threat reports, campaigns, and adversary behavior
  </li>
  <li>
   Evaluate indicators, TTPs, and end-to-end attack narratives
  </li>
  <li>
   Help generate, structure, and validate threat-intelligence data used to train and assess AI systems
  </li>
  <li>
   Review AI-generated outputs for accuracy and consistency
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  What We&rsquo;re Looking For
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   2+ years in threat intelligence, SOC, or security analysis roles
  </li>
  <li>
   Familiar with MITRE ATT&amp;CK, OSINT collection, or CTI workflows
  </li>
  <li>
   Ability to distinguish real attacker behavior from noise or fabricated data
  </li>
  <li>
   Strong analytical, research, and writing skills
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Why Join Us
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Competitive pay and flexible remote work.
  </li>
  <li>
   Work directly on frontier AI systems.
  </li>
  <li>
   Freelance perks: autonomy, flexibility, and global collaboration.
  </li>
  <li>
   Potential for contract extension.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Application Process (Takes 10&ndash;15 min)
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Submit your resume
  </li>
  <li>
   Complete a short screening
  </li>
  <li>
   Project matching and onboarding
   <br/>
   <br/>
  </li>
 </ul>
 <em>
  PS: Our team reviews applications daily. Please complete your AI interview and application steps to be considered for this opportunity.
 </em>
</div>


Threat Intelligence Analyst

Peraton

<div><div><h5 class="jobSectionHeader"><b>ABOUT PERATON</b></h5><p>
Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world&rsquo;s leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees solve the most daunting challenges that our customers face. Visit peraton.com to learn how we&rsquo;re keeping people around the world safe and secure.</p></div><div><h5 class="jobSectionHeader"><b>
ABOUT THE ROLE</b></h5><div><div>
Peraton is seeking a Threat Intelligence Analyst / Scrum Master to support U.S. Customs and Border Protection (CBP) by analyzing and fusing data from open-source, commercial, government, and technical sources to identify and assess threats impacting CBP missions, systems, and personnel.</div><div></div><div><br>
This dual-role position combines all-source intelligence analysis with Agile team facilitation, producing actionable intelligence while guiding an analytics team through Scrum processes in support of the CBP analytics and intelligence support programs.</div><div></div><div><br>
Support will be provided across multiple mission locations:</div><ul><li>
Ashburn, VA
</li><li>Sterling, VA
</li><li>Washington, D.C.</li></ul><div><b>
Key Responsibilities</b></div><ul><li>
Conduct all-source threat analysis by integrating open-source, commercial, government, and technical data to identify emerging threats and risks.</li><li>
Produce intelligence assessments, threat reports, and executive briefings supporting CBP operational and strategic decision-making.</li><li>
Apply structured analytic techniques to evaluate information, assess confidence levels, and deliver timely Indications &amp; Warning (I&amp;W) products.</li><li>
Analyze adversary tactics, techniques, and patterns across domains including transnational crime, cyber-enabled threats, foreign influence, and protective security risks.</li><li>
Use analytic and visualization tools such as Palantir, i2 Analyst&rsquo;s Notebook, Maltego, Power BI, or Tableau to investigate and communicate threat insights.</li><li>
Leverage Python, R, or SQL to support data analysis, enrichment, and analytic workflows.</li><li>
Serve as Scrum Master, facilitating Agile ceremonies (sprint planning, stand-ups, reviews, retrospectives) and supporting backlog management.</li><li>
Track sprint progress, remove impediments, and promote Agile best practices and continuous improvement within the team.</li><li>
Ensure intelligence activities comply with CBP/DHS legal, privacy, and governance requirements.</li><li>
Collaborate with analysts, engineers, and mission stakeholders to deliver timely, mission-relevant intelligence products.</li></ul><div><b>
 **Position is contingent upon contract award**</b></div></div></div><div><h5 class="jobSectionHeader"><b>
QUALIFICATIONS</b></h5><div><div><b>
R</b><b>equired Qualifications</b></div><ul><li>
Minimum of 12 years with BS/BA; Minimum of 10 years with MS/MA. 16 years with a HS diploma/equivalent can be considered in lieu of a degree.</li><li>
8+ years of experience in all-source intelligence analysis, threat intelligence, or related analytical roles.</li><li>
Demonstrated experience producing intelligence assessments, threat reports, and executive briefings.</li><li>
Experience with intelligence analysis platforms (e.g., Palantir, i2 Analyst&rsquo;s Notebook, Maltego) and data visualization tools.</li><li>
Working knowledge of Python or R and SQL for data preparation and analysis.</li><li>
Experience working in Agile or Scrum environments supporting analytic or technical teams.</li><li>
Strong analytical, writing, and briefing skills with the ability to communicate findings to diverse audiences.</li><li>
Understanding of legal, privacy, and ethical considerations in intelligence analysis.</li></ul><div><b>
Clearance Requirements</b></div><ul><li>
Active and current TS/SCI clearance
</li><li>Ability to obtain and maintain CBP BI suitability.</li><li>
U.S. Citizenship required.</li></ul><div><b>
Preferred Qualifications</b></div><ul><li>
Bachelor&rsquo;s degree in Intelligence Studies, International Relations, Data Science, Computer Science, Criminal Justice, or related field (or equivalent experience).</li><li>
Certified ScrumMaster (CSM), SAFe Scrum Master, or Agile certification.</li><li>
Experience in cyber threat intelligence, protective intelligence, or influence operations analysis.</li><li>
Familiarity with MITRE ATT&amp;CK framework and adversary TTP analysis.</li><li>
Experience with graph databases, entity resolution, or network analysis methodologies.</li><li>
Exposure to cloud analytics platforms (AWS, Azure, GCP) and large-scale data environments.</li><li>
Experience supporting DHS, CBP, or other federal intelligence programs.</li></ul></div></div><div></div><div><h5 class="jobSectionHeader"><b><br>
DETAILS</b></h5><div><p>
<b>Target Salary Range:</b> $112,000 - $179,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual&rsquo;s experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.
</p></div><div><p><b>Benefits Statement:</b> Peraton offers eligible employees a variety of benefits including medical, dental, vision, life, health savings account, short/long term disability, EAP, parental leave, 401(k), paid time off (PTO) for vacation, and company paid holidays. A full listing of available benefits can be viewed at https://www.careers.peraton.com/benefits.
</p></div><div><p>
<b>Application Duration Statement:</b> The application period for the job is estimated to be 30 days from the job posting date. However, this timeline may be shortened or extended depending on business needs and the availability of qualified candidates.
</p></div><p><b>
EEO:</b> Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.</p></div></div><div></div>

THREAT INTELLIGENCE ANALYST/ SCRUM MASTER (SME)

Abu Dhabi Islamic Bank - Egypt

<div>
 <p>
  <strong>
   <u>
    Strategic objectives:
   </u>
  </strong>
 </p>
 <p>
  Support Information security strategic program milestones
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   <u>
    Functional Objective:
   </u>
  </strong>
 </p>
 <p>
  <strong>
   Information Security Program
  </strong>
 </p>
 <p>
  Technical implementation of the Information security program and set actionable plan with IT.
 </p>
 <p>
  Establish reporting communications that support Information Security IT threat Intelligence activities
 </p>
 <p>
  Ensure implementation of necessary information security policies, standards, procedures and guidelines.
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Threat Intelligence
  </strong>
 </p>
 <p>
  Responsible for implementing of threat Intelligence program in parallel with threat vulnerability management program.
 </p>
 <p>
  Follow the procedures to align with cyber security incident handling program.
 </p>
 <p>
  Work closely with SOC to provide all needed information for proactive monitoring.
 </p>
 <p>
  Maintain a current understanding the threat landscape for the Banking industry and closely aligned with head of Incident handling to provide security operation centre with up to date of Indication of compromise.
 </p>
 <p>
  Maintaining the supported technologies and follow the processes for proactive actions against Zero Day Attacks and persistence threats.
 </p>
 <p>
  Responsible for determining enterprise Information security standards, ensuring bank is regulatory compliant with the rules for relevant bodies, enforce adherence to security practices.
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Risk Identification, classification ,assessment and evaluation
  </strong>
 </p>
 <p>
  Monitor information Security assessment to determine whether information systems are protected, and controlled. Collect information and review documentation to ensure that risks are identified and evaluated.
 </p>
 <p>
  Responsible for evaluate controls for information systems ( all IT systems) during the requirements, acquisition, development and testing phases for compliance with the Information Security policies, standards, procedures and applicable external requirements ,ensure Information security risks are addressed which could lead to organization financial and reputation loss.
 </p>
 <p>
  Evaluate the design, implementation and monitoring of system and logical security controls to verify the confidentiality, integrity and availability of information, this to ensure overall Information Security that could lead to organization financial and reputation loss if data is breached.
 </p>
 <p>
  Maintain and Monitor the risk register to ensure that all identified risks highlighted with related accountability, Monitor existing risk to ensure that changes are identified and managed appropriately.
 </p>
 <p>
  Maintain the risk scenarios to estimate likelihood and impact of significant risks to the Information systems, Correlate identified risks to relevant business processes to assist in identifying risk ownership.
 </p>
 <p>
  Analyse risks, incidents and interdependencies to determine their impact on IT Systems and relative business objectives.
 </p>
 <p>
  Review IT Security Standards and Baselines
 </p>
 <p>
  Enable the measurement of IT Information security processes.
 </p>
 <p>
  Monitor the information systems (IT systems) control design and implementation processes against Information Security baselines and standards to ensure it is implemented effectively and within time.
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Risk and Control Monitoring
  </strong>
 </p>
 <p>
  Review and monitor key risk indicators (KRIs) to monitor and communicate their status to relevant stakeholders
 </p>
 <p>
  Identify the gap between current and desired risk levels to manage risk ,evaluate information security controls to determine whether they are appropriately and effectively mitigating the risk to defined acceptable level
 </p>
 <p>
  Monitor and Communicate key risk indicators (KRIs) and Management activities to assist relevant stakeholders in their decision-making Process
 </p>
 <p>
  Identify and report on risk including compliance to initiate corrective action and meet business regulatory requirements
 </p>
 <p>
  Ensure that risk assessments, vulnerability assessments and threat analysis are conducted periodically and consistently to identify risk to the organization&rsquo;s information.
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Information Security Risk Response
  </strong>
 </p>
 <p>
  Share the responsibility to Identify and evaluate Risk Response Options and provide IT managers with information to enable risk response decisions
 </p>
 <p>
  Apply Risk criteria to assist in the development of the risk profile for management approvals
 </p>
 <p>
  Assist in the development of business cases supporting the investment plan to ensure risk responses are aligned with identified business objectives
 </p>
</div>


Cyber Threat Intelligence Analyst/ Senior Analyst

Openkyber

<div><p>As a Senior Project Manager specializing in Cloud AWS, you will lead critical initiatives transforming enterprise data and analytics landscapes by migrating on-premise workloads to cutting-edge cloud-based data fabrics. You will oversee end-to-end project delivery, ensuring that our cloud ecosystem aligns with operational, compliance, and financial objectives. This position offers a unique opportunity to shape our cloud strategy, foster cross-functional collaboration, and influence the future of our data-driven services.</p>
<b>Key Responsibilities Strategic Project Leadership:</b>
<p>Lead complex cloud migration projects from inception through go-live, including vendor selection, proof of concept, requirements gathering, design, configuration, testing, data migration, user acceptance, and deployment. Develop comprehensive project plans, manage scope, schedules, budgets, and resources effectively across multiple teams and stakeholders. Coordinate with cross-functional units such as Big Data, Infrastructure &amp; Operations, Security, Compliance, and Application Development to ensure cohesive execution.</p>
<b>Technical &amp; Cloud Expertise:</b>
<p>Drive the migration of large-scale, data-oriented workloads to AWS cloud environments, leveraging best practices in cloud architecture and security. Oversee implementation of data replication, streaming, analytics pipelines, and support the integration of SaaS data tools like Snowflake. Ensure adherence to cloud security protocols, risk mitigation strategies, and compliance standards, particularly related to cloud security, DevOps, FinOps, and MLOps.</p>
<b>Operational Excellence:</b>
<p>Monitor project KPIs and milestones, proactively identifying risks and implementing mitigation plans. Facilitate Agile, Scrum, and DevOps practices to accelerate delivery and improve project agility. Serve as a liaison between technical teams and business stakeholders to translate strategic objectives into actionable projects.</p>
<b>Team &amp; Stakeholder Collaboration:</b>
<p>Build and lead high-performing, multi-disciplinary project teams. Foster strong relationships with internal teams, vendors, and executive leadership, ensuring clear communication and stakeholder alignment. Promote a culture of continuous improvement in project management methodologies, tools, and practices.</p>
<b>Reporting &amp; Communication:</b>
<p>Provide regular status updates, risk assessments, and strategic insights to executive leadership. Present complex technical concepts in accessible language to diverse audiences.</p>
<b>Qualifications &amp; Skills</b>
<ul><li>Bachelor's degree in Computer Science, MIS, CIS, or related field; or equivalent professional experience.</li>
<li>PMP, Certified ScrumMaster, or AWS certifications highly preferred.</li>
<li>6-8+ years of experience managing complex, enterprise-scale projects, including cloud migrations and data platform implementations.</li>
<li>Proven expertise in leading projects utilizing Waterfall, Agile, Scrum, and DevOps methodologies.</li>
<li>Deep understanding of AWS cloud services, data architecture, DevOps, FinOps, and MLOps practices.</li>
<li>Strong leadership, organizational, negotiation, and interpersonal skills.</li>
<li>Proficiency with project management tools such as MS Project, Azure DevOps, and Visio.</li>
</ul><p>Publishing Pay Range: $100.00 - $105.00 Hourly</p>
<p><b>For applications and inquiries, contact:</b> hirings@openkyber.com</p></div>

Cloud Threat Intelligence Analyst

<div><div><h5 class="jobSectionHeader"><b>ABOUT PERATON</b></h5><p>
Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world&rsquo;s leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees solve the most daunting challenges that our customers face. Visit peraton.com to learn how we&rsquo;re keeping people around the world safe and secure.</p></div><div><h5 class="jobSectionHeader"><b>
ABOUT THE ROLE</b></h5><div><div>
Peraton is currently hiring a <b>Jr Industrial Control System Cyber Threat Intelligence Analyst</b> for its Federal Strategic Cyber programs.</div><div></div><div><b><br>
Location: On-site in Arlington, VA.</b></div><div></div><div><b><br>
About the Role:</b></div><div></div><div><br>
As a Jr Industrial Control System Cyber Threat Intelligence Analyst, you will play a vital role in safeguarding critical infrastructure by integrating multiple intelligence sources to create actionable insights and recommendations. You will support operational teams and senior leaders by investigating and analyzing cyber threats specific to operational technology environments.</div><div></div><div><b><br>
Key Responsibilities:</b></div><ul><li>
Fuse multiple intelligence sources to develop comprehensive products, recommendations, and prioritize organizational focus.</li><li>
Research and investigate current threats in operational technology (OT), critical infrastructure sectors, and mission areas.</li><li>
Analyze data to derive insights on adversary capabilities, intentions, tactics, and behaviors in relation to critical infrastructure attacks.</li><li>
Research and review cyber warfare tactics, techniques, and procedures affecting information networks.</li><li>
Prepare assessments and threat profiles related to ICS/SCADA systems based on recent trends.</li><li>
Escalate new or high-priority threats to the Cyber Physical Forensics Section as needed.</li><li>
Investigate OT defensive tactics, techniques, and procedures (TTPs) for threat detection and response.</li><li>
Map ICS activities and threats using the MITRE ATT&amp;CK Framework.</li><li>
Collaborate with host, network, and cloud forensic analysts to support incident response and threat hunting missions.</li><li>
Identify potential open-source vulnerabilities within ICS/SCADA environments.</li><li>
Assess emerging threats and vulnerabilities related to homeland security.</li><li>
Analyze classified threat intelligence reports concerning ICS/SCADA to evaluate adversary intent and capability.</li><li>
Produce high-quality papers, presentations, and recommendations for senior US government intelligence and operations officials.</li></ul></div></div><div><h5 class="jobSectionHeader"><b>
QUALIFICATIONS</b></h5><div><div><b>
Minimum Qualifications: </b><b>LU</b></div><ul><li>
Bachelor&rsquo;s degree and 2 years of experience, or Associate&rsquo;s degree and 4 years, or High School diploma and 6+ years of relevant experience in lieu of a degree.</li><li>
Hands-on experience in processing, triage, threat analysis, and responding to cyber incident reports.</li><li>
Demonstrated ability to research and analyze cyber threats across multiple industries or timeframes, including critical infrastructure sectors.</li><li>
Familiarity with cyber threat intelligence tools such as DomainTools, VirusTotal, SHODAN, etc..</li><li>
Proven experience producing all-source (unclassified and classified) finished intelligence assessments aligned with ICD203 analytic tradecraft standards.</li><li>
Demonstrated strong collaboration skills and ability to build key threat intelligence partnerships to enhance information sharing and cyber defenses.</li><li>
U.S. citizenship is required.</li><li>
Active Top Secret Security Clearance with SCI eligibility.<ul><li>
Ability to obtain and maintain DHS EOD agency clearance prior to start.</li></ul></li></ul><div><b>
Preferred Qualifications:</b></div><ul><li>
SANS Global Industrial Cyber Security Professional (GICSP).</li><li>
SANS GIAC Response and Industrial Defense (GRID).</li><li>
SANS GIAC Cyber Threat Intelligence (GCTI).</li></ul></div></div><div><h5 class="jobSectionHeader"><b>
DETAILS</b></h5><div><p>
<b>Target Salary Range:</b> $86,000 - $138,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual&rsquo;s experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.
</p></div><div><p><b>Benefits Statement:</b> Peraton offers eligible employees a variety of benefits including medical, dental, vision, life, health savings account, short/long term disability, EAP, parental leave, 401(k), paid time off (PTO) for vacation, and company paid holidays. A full listing of available benefits can be viewed at https://www.careers.peraton.com/benefits.
</p></div><div><p>
<b>Application Duration Statement:</b> The application period for the job is estimated to be 30 days from the job posting date. However, this timeline may be shortened or extended depending on business needs and the availability of qualified candidates.
</p></div><p><b>
EEO:</b> Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.</p></div></div><div></div>

JR INDUSTRIAL CONTROL SYSTEM CYBER THREAT INTELLIGENCE ANALYST - WITH OT/CTI/THREAT HUNT EXPERIENCE

Google

<div>The application window will be open until at least March 25, 2026. This opportunity will remain online based on business needs which may be before or after the specified date.<br>
Note: Google's hybrid workplace includes remote roles. By applying to this position you will have an opportunity to share your preferred working location from the following:<br>
<br>
<b>Remote locations: Pennsylvania, USA; United States.</b><h3 class="jobSectionHeader"><b>
Minimum qualifications:</b></h3><ul>
<li>Bachelor's degree or equivalent practical experience.</li>
<li>5 years of experience in a customer-facing investigative role in cyber security (e.g., network forensics analyst, threat intelligence analyst).</li>
<li>Experience engaging with, and presenting to, technical stakeholders and executive leaders.<br>
</li>
<li>Experience with project management.</li></ul><br>
<h3 class="jobSectionHeader"><b>
Preferred qualifications:</b></h3><ul>
<li>Experience with CTI methodologies and application within cyber security organizations.<br>
</li>
<li>Experience in evaluating host and network forensic reports of electronic media, packet capture, log data analysis, malware triage and network devices in support of intrusion analysis or enterprise level information security operations.<br>
</li>
<li>Experience in the consumption, processing, and analysis of tactical Cyber Threat Intelligence (CTI) within an operational environment, supporting monitoring, detection, and response capabilities.<br>
</li>
<li>Experience in program management or business.</li>
<li>Knowledge of adversarial cyber actors, to include tactics, techniques, and procedures.</li>
</ul><div><h2 class="jobSectionHeader"><b>About the job</b></h2><p>
Essential Intelligence Access (EIA) is a subscription service that consolidates features from legacy Mandiant services to address cyber threat intelligence use cases. It provides foundational intelligence and allows clients to select customizable in-depth search insights deliverables. Key features include strategic alignment sessions, intelligence briefings, access to proprietary reports, and credential monitoring.</p><p>
In this role, you will support Mandiant's Essential Intelligence Access (EIA) program. Your role involves tailoring deliverables to the client's needs, acting as an analytic resource, and building client relationships. You will work with stakeholders to scope priorities and requirements, providing substantive analytic input. You will make deliverables relevant and valuable for the customer and will also host monthly meetings with the customer to discuss intelligence requirements and threat concerns. You will also periodically review Mandiant holdings and share urgent findings.</p><p>
You will be a Mandiant representative supporting a broad range of Mandiant customers with the goal of developing, supporting, maintaining, and driving partnership between Google and the customer by leveraging Mandiant Threat Intelligence portfolio, expertise, and advocacy.
</p>You will be an expert at balancing priorities, and demonstrate your efficient communication skills with the customer&rsquo;s key priorities. You will work directly with clients to understand their intelligence concerns and build the partnership between relevant customer and Google stakeholders.<div><div>
Part of Google Cloud, Mandiant is a recognized leader in dynamic cyber defense, threat intelligence and incident response services. Mandiant's cybersecurity expertise has earned the trust of security professionals and company executives around the world. Our unique combination of renowned frontline experience responding to some of the most complex breaches, nation-state grade threat intelligence, machine intelligence, and the industry's best security validation ensures that Mandiant knows more about today's advanced threats than anyone.</div><div></div><div><br>
The US base salary range for this full-time position is $138,000-$200,000 + bonus + equity + benefits. Our salary ranges are determined by role, level, and location. Within the range, individual pay is determined by work location and additional factors, including job-related skills, experience, and relevant education or training. Your recruiter can share more about the specific salary range for your preferred location during the hiring process.</div><div></div><div><br>
Please note that the compensation details listed in US role postings reflect the base salary only, and do not include bonus, equity, or benefits. Learn more about benefits at Google.</div></div></div><div><h2 class="jobSectionHeader"><b>
Responsibilities</b></h2><ul>
<li>Collaborate with customers to understand their cyber threat intelligence (CTI) needs and identify opportunities to maximize the impact of CTI within their operations.<br>
</li>
<li>Oversee the delivery, organization, and sharing of Mandiant Threat Intelligence products to the customer.<br>
</li>
<li>Communicate technical findings effectively to both technical and non-technical audiences.<br>
</li>
<li>Produce tailored intelligence reports that meet the specific needs of the customer's intelligence analysts and executive leadership.<br>
</li>
<li>Transform raw intelligence from various sources, including sensors, incident response engagements, and security tools, into reports and briefings.</li>
</ul></div>Google is proud to be an equal opportunity workplace and is an affirmative action employer. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. See also Google's EEO Policy and EEO is the Law. If you have a disability or special need that requires accommodation, please let us know by completing our Accommodations for Applicants form.</div>

Senior Security Analyst, Mandiant Threat Intelligence Services

Chronos Information Technology

<p>The Cyber Exposure &amp; Security Testing Analyst is responsible for identifying, analyzing, and validating cyber risks affecting complex and globally distributed digital ecosystems. This is a multidisciplinary role that combines cyber threat intelligence, external attack surface discovery, open-source intelligence (OSINT), and controlled security testing to provide a unified and context-aware understanding of an organization's external cyber exposure. The analyst will investigate digital footprints, monitor underground cyber ecosystems for targeted threats, discover internet-facing assets, and perform controlled, safety-aware security testing to validate exposure pathways. The environments assessed may include enterprise infrastructure, cloud services, automation platforms, connected devices, remote access environments, and vendor ecosystems across multiple industries. This is an investigative role for a curious and analytical security professional who is driven to uncover not just vulnerabilities, but the complete attack chain &mdash; from attacker reconnaissance through to the realistic impact of a potential breach. The role works closely with system integrators, infrastructure teams, and clients to produce intelligence that is actionable, contextually accurate, and clearly communicated. Analysts in this role are expected to think like adversaries, understanding how attackers discover, evaluate, and exploit exposed systems in real-world environments.</p><p>ROLE FOCUS</p><p>This role is intelligence-first and testing-second, but both capabilities are essential. The primary skill set is analytical &mdash; the ability to gather, correlate, and contextualize intelligence from multiple sources. Security testing is used to validate intelligence findings and confirm real-world exposure risk, rather than serving as the sole output of the role.</p><p>KEY RESPONSIBILITIES</p><p>Threat Intelligence Monitoring: Monitor global cyber threat intelligence sources to identify threats affecting connected environments and digital infrastructure.</p><p>Activities include:</p><ul><li>monitoring underground forums, marketplaces, and credential trading communities</li><li>tracking initial access broker activity</li><li>analyzing breach intelligence datasets and credential leaks</li><li>monitoring infostealer malware logs</li><li>identifying emerging threats targeting internet-exposed systems</li></ul><p>Intelligence sources may include open-source intelligence platforms, internet telemetry datasets, breach intelligence repositories, and security research communities. The analyst will produce periodic intelligence briefings summarising relevant risks and trends in a format accessible to both technical and non-technical stakeholders.</p><p>External Attack Surface Discovery Identify and map all internet-visible infrastructure associated with monitored environments. Activities include:</p><ul><li>discovering domains and subdomains</li><li>mapping exposed IP infrastructure</li><li>identifying exposed services and administrative interfaces</li><li>monitoring certificate transparency logs</li><li>conducting passive DNS analysis</li><li>identifying exposed cloud services and SaaS platforms</li><li>detecting shadow IT, forgotten assets, and infrastructure introduced through third-party integrations</li></ul><p>The analyst will analyse attacker discovery pathways and potential exploitation vectors to develop a realistic view of the organisation&rsquo;s external exposure.</p><p>Security Testing &amp; Exposure Validation</p><p>Conduct controlled and non-disruptive security testing to validate the real-world risk of exposures identified through intelligence monitoring and attack surface discovery. Activities include:</p><ul><li>reconnaissance and infrastructure discovery</li><li>identification and validation of vulnerabilities and security misconfigurations</li><li>validation of exposed services and authentication mechanisms</li><li>verification of publicly accessible attack pathways</li></ul><p>All testing activities are performed within defined scope and authorisation, with priority given to operational safety. Particular care is taken when assessing production environments where operational continuity and safety are critical.</p><p>Digital Footprint &amp; OSINT Investigation</p><p>Investigate the digital footprints of organisations and individuals connected to monitored environments. Activities include:</p><ul><li>open-source intelligence research</li><li>digital footprint mapping</li><li>corporate entity identification</li><li>identity exposure analysis</li><li>correlation of public intelligence with discovered infrastructure</li></ul><p>This contextual intelligence improves the accuracy and relevance of exposure analysis.</p><p>Identity Exposure &amp; Credential Intelligence</p><p>Identify indicators of potential identity compromise affecting monitored personnel, vendors, or organizations. Activities include:</p><ul><li>breach intelligence monitoring</li><li>credential reuse analysis</li><li>detection of exposed authentication tokens</li><li>correlation of identity exposure with potential access pathways</li></ul><p>All findings are validated before escalation to minimise false positives.</p><p>CORE COMPETENCIES &amp; TECHNICAL FOUNDATIONS</p><p>Candidates should demonstrate practical capability in the following areas through professional work, independent research, or a combination of both.Threat Intelligence AnalysisExperience analysing cyber threats from sources such as underground forums, breach datasets, and threat intelligence feeds.Ability to distinguish signal from noise and produce concise, actionable intelligence summaries.Attack Surface DiscoveryExperience discovering and mapping external infrastructure using techniques such as:</p><ul><li>internet scanning platforms</li><li>passive DNS analysis</li><li>certificate transparency monitoring</li><li>infrastructure reconnaissance</li></ul><p>Ability to identify exposed services, misconfigured interfaces, and shadow IT assets.</p><p>OSINT Investigation Ability</p><p>Conduct open-source intelligence investigations to map digital footprints, identify corporate structures, and gather contextual intelligence about organisations and individuals.Familiarity with OSINT frameworks and investigative methodologies.</p><p>Security Testing &amp; Validation Experience</p><p>Identifying and validating vulnerabilities and misconfigurations across web services, exposed infrastructure, and authentication mechanisms. Strong understanding of safe, non-disruptive testing methodologies.</p><p>Technical Foundations</p><p>Strong understanding of:</p><ul><li>DNS architecture</li><li>IP networking</li><li>web application fundamentals</li><li>cloud service infrastructure</li></ul><p>Ability to interpret certificate data, infrastructure configurations, and network behaviour</p><p>Analytical &amp; Communication Skills</p><p>Ability to:</p><ul><li>correlate intelligence from multiple sources</li><li>identify emerging cyber risk patterns</li><li>translate technical findings into clear risk narratives</li><li>communicate complex issues to non-technical stakeholders</li></ul><p>Strong written communication is essential.</p><p>CERTIFICATION</p><p>Certifications like OSCP, GIAC GPEN, GXPN, CREST CCT is highly preferable for right candidate we are ready to sponsor</p><p>PREFERRED TECHNICAL BACKGROUND</p><p>The following technical exposures are advantageous but not required:</p><ul><li>connected devices and IoT ecosystems</li><li>automation or control environments</li><li>satellite or remote connectivity infrastructure</li><li>cloud and SaaS security exposure analysis</li><li>vendor access ecosystems and supply chain risk</li></ul><p>Experience with scripting or automation (Python, Bash, or similar) for reconnaissance or intelligence processing is beneficial.</p><p>RESEARCH PORTFOLIO &amp; EVIDENCE OF WORK:</p><p>Candidates are encouraged to share examples of investigative or technical work demonstrating curiosity and analytical capability. Examples include:</p><ul><li>security research blogs or technical write-ups</li><li>OSINT investigations or intelligence reports</li><li>vulnerability research or attack surface discovery projects</li><li>GitHub repositories related to security research or automation</li><li>conference talks, presentations, or training material</li><li>original tools or scripts for reconnaissance or analysis</li></ul><p>Independent research and experimentation are viewed as strong positive indicators.</p><p>Job Types: Full-time, Permanent</p>

Cyber Exposure & Security Testing Analyst

Search 8715+ Threat intelligence analyst jobs near you this March. New roles added regularly across leading industries. Apply today.