Senior Cyber Threat Intelligence Analyst

Mobility

. Own and run the Cyber Threat Intelligence program end to end, from collection through analysis, production, dissemination, and feedback .

Posted 10/26/2026full-timeMonterrey • MexicoSenior💰 MX$850,000 - MX$1,276,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Cyber Threat Intelligence program management, including the ability to analyze and produce actionable intelligence products while leveraging AI tools for enhanced operations. Strong proficiency in threat intelligence frameworks and collaboration with cross-functional teams to inform security strategies.

Highest-signal resume keywords

Cyber Threat Intelligence Program ManagementCommercial Threat Intel PlatformsThreat Intelligence Lifecycle UnderstandingAI Tools ImplementationAnalytical Problem-Solving Skills

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Cyber Threat IntelligenceThreat Actor TrackingTTP ReportingIntelligence AnalysisAI-Assisted WorkflowsMITRE ATT&CK FrameworkDiamond ModelCyber Kill ChainOperational Procedures DocumentationTechnical Challenge Resolution

Soft Skills

Excellent Communication SkillsIndependent Problem Solving

Tools & Technologies

Recorded FutureFlashpointMandiant Threat IntelGoogle Threat IntelCrowdStrike Falcon

Industry Keywords

Cyber DefenseThreat LandscapeIntelligence ProductionSource MonitoringDFIR Collaboration

Tech Stack

Tools & technologies

Open Source

About the role

Key responsibilities & impact

Own and run the Cyber Threat Intelligence program end to end, from collection through analysis, production, dissemination, and feedback
Define and continuously mature the CTI program’s processes, standards, and roadmap
Serve as the primary point of contact and subject matter expert for cyber threat intelligence across Cyber Defense
Monitor, collect, and analyze intelligence from commercial threat intelligence platforms and open source and public sources
Manage and prioritize platform subscriptions and sources to maximize relevance and value
Produce structured, actionable intelligence products, including strategic, operational, and tactical briefs, indicator and TTP reports, and threat actor profiles
Track threat actors, campaigns, and TTPs relevant to the organization’s industry and threat landscape
Implement AI agents and AI-assisted workflows to automate source monitoring, synthesize intelligence into structured briefs, and accelerate triage of raw threat data
Partner with DFIR and Threat Hunting teams, feeding intelligence into investigations and hunts and incorporating findings back into the intelligence picture
Partner with Security Engineering to translate intelligence into detection context within Google SecOps

Requirements

What you’ll need

4+ years of hands-on experience in cyber threat intelligence
Experience working with commercial threat intel platforms such as Recorded Future, Flashpoint, Mandiant Threat Intel, Google Threat Intel, CrowdStrike Falcon, or similar
Strong understanding of the threat intelligence lifecycle and common frameworks such as MITRE ATT&CK, the Diamond Model, and the Cyber Kill Chain
Demonstrated experience implementing AI agents or tools to support CTI operations
Proven ability to independently own and run an intelligence program end to end, without relying on a larger team
Strong analytical and problem-solving skills
Ability to independently investigate and resolve complex technical challenges
Excellent written and verbal communication skills
Ability to document technical solutions, detections, workflows, and operational procedures
Full-time availability Monday through Friday, with possible on-call, after-hours, weekend, and holiday support
Applicants must be legally authorized to work in Mexico at the time of hire
Immigration or work permit support is not provided

Benefits

Comp & perks

Limited participation in on-call rotations, after-hours escalations, weekends, and holidays may be required to support cybersecurity operations and major incidents
Up to 10% domestic and international travel may be required
Reasonable accommodations for candidates with disabilities