Threat Intelligence Analyst

Blackthorne Consulting

. Collect data, research threats, analyze data, and create actionable insights for key stakeholders .

Posted 10/31/2026full-timeRemote • United StatesMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Expertise in threat intelligence analysis, including the ability to collect, analyze, and translate threat data into actionable insights. Proficient in developing automation pipelines and producing technical intelligence reports to enhance enterprise security.

Highest-signal resume keywords

Threat Intelligence AnalysisAutomation ScriptingMalware AnalysisThreat Intelligence PlatformsAdversary Tracking

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Data CollectionThreat ResearchAnalysis ScriptingSandboxing TechnologyMalware AnalysisYara SignaturesAdversary Tactics AnalysisTechnical Intelligence ReportingThreat Detection RecommendationsCampaign Analysis

Soft Skills

CommunicationCollaborationProblem-Solving

Tools & Technologies

MISPOpenCTIAPIsAutomation Pipelines

Industry Keywords

Threat IntelligenceAdversary ActivityPhishing CampaignsCommand-and-Control InfrastructureCriminal Threat ActorsNation-State ActorsEnterprise Attack Techniques

Tech Stack

Tools & technologies

Open SourcePython

About the role

Key responsibilities & impact

Collect data, research threats, analyze data, and create actionable insights for key stakeholders
Improve enterprise detection, response, and risk awareness
Identify collection opportunities and track adversary activity
Investigate campaigns and create scripts and tooling to deliver analysis at scale
Conduct threat intelligence research on adversary groups, campaigns, emerging threat techniques, malware families, and attack infrastructure
Perform high-interaction analysis of phishing campaigns, command-and-control infrastructure, and attacker tooling
Develop automation pipelines to collect, normalize, and enrich threat intelligence data
Maintain internal intelligence repositories and campaign tracking systems
Build and maintain basic APIs integrating with enterprise security platforms
Evaluate threat intelligence feeds and data sources for timeliness, reliability, and relevancy
Produce threat intelligence reports and campaign analyses
Deliver technical briefings to security teams and executive stakeholders
Support incident investigations with adversary context and attribution insights
Assess client threat intelligence functions and develop actionable improvement roadmaps
Provide inputs to detection engineering, threat hunt, and adversary emulation teams

Requirements

What you’ll need

4+ years experience in threat intelligence
2+ years experience writing analysis scripts or other applicable automation
2+ years experience with sandboxes and sandboxing technology
2+ years experience tracking criminal threat actors
Experience analyzing adversary tactics and campaigns
Familiarity with enterprise attack techniques
Experience producing technical intelligence reports
Ability to translate threat intel insights into actionable threat detection, threat hunt, or other control recommendations
2+ years experience working as a threat intelligence analyst in a professional organization (preferred)
Demonstrated track record of open source contributions or conference talks related to automated analysis of threat data, sandboxing or other related topics (preferred)
Malware analysis experience, including experience writing and maintaining Yara signatures (preferred)
Experience tracking nation-state actors (preferred)
Experience with threat intelligence platforms such as MISP and OpenCTI (preferred)
Python or other scripting experience (preferred)