Role & responsibilities

Senior Cyber Threat Intelligence Analyst

Key Responsibilities

Threat Monitoring & Intelligence Analysis

- Monitor and assess emerging cyber threats, adversary activity, malware campaigns, and vulnerability exploitation trends.
- Track threat actors and provide analysis on their capabilities, targeting, infrastructure, and TTPs.
- Conduct technical investigations using threat intelligence, OSINT, and infrastructure analysis techniques.
- Correlate intelligence from multiple sources and assess potential impact to the organization.

Intelligence Operations & Dissemination

- Lead IOC collection, enrichment, validation, and lifecycle management activities.
- Maintain intelligence records, indicators, and threat artifacts within the organization's Threat Intelligence Platform (TIP).
- Develop and disseminate actionable threat advisories, intelligence reports, and emerging threat notifications.
- Support intelligence-sharing efforts with internal stakeholders and trusted external partners.

Intelligence Reporting & Stakeholder Engagement

- Produce tactical, operational, and strategic intelligence products for technical and business audiences.
- Deliver intelligence briefings to security teams, leadership, and other stakeholders.
- Provide threat-informed recommendations that improve organizational awareness and preparedness.
- Serve as a subject matter expert on adversary activity, emerging threats, and cyber risk trends.

Incident Response & Security Support

- Provide intelligence support during cybersecurity investigations and incident response activities.
- Perform adversary-focused analysis to support incident scoping, attribution, and impact assessments.
- Partner with Security Operations, Vulnerability Management, and Risk teams to provide threat context and intelligence insights.
- Identify intelligence gaps, emerging risks, and opportunities to strengthen defensive capabilities.

Required Qualifications

- 5+ years of experience in Cyber Threat Intelligence, Threat Research, Incident Response, Security Operations,



or related cybersecurity disciplines.
- Demonstrated experience tracking threat actors, malware campaigns, adversary infrastructure, and emerging cyber threats.
- Strong understanding of threat intelligence tradecraft, intelligence lifecycle methodologies, and frameworks such as MITRE ATT&CK.;
- Experience producing tactical, operational, and strategic intelligence products for technical and executive audiences.
- Familiarity with nation-state, sophisticated cyber-criminal groups and supply chain threats
- Experience in intelligence-driven hunting to spot suspicious activities in the network and identify potential risks
- Robust understanding of cyber threat intelligence frameworks and methodologies including MITRE ATT&CK;, ATT&CK; Navigator, Diamond Model, Cyber Kill Chain, STIX/TAXII, Intelligence Lifecycle, and Structured Analytic Techniques.
- Proven ability to independently conduct investigations, develop actionable intelligence, and brief stakeholders.
- Strong analytical, communication, and technical writing skills.

Desired Skills

- Experience with Threat Intelligence Platforms such as Anomali, ThreatQ, ThreatConnect, OpenCTI, MISP, or similar platforms.
- Proficiency with intelligence and OSINT tools such as Maltego, VirusTotal, Shodan, Censys, DomainTools, PassiveTotal, GreyNoise, URLScan, SecurityTrails, or similar investigative platforms.
- Knowledge of threat actor clustering methodologies used to track adversary campaigns, intrusion sets, and threat group activity.
- Experience conducting infrastructure analysis involving domains, DNS, passive DNS, IP addresses, ASNs, WHOIS records, certificates, hosting providers, and internet-facing assets.
- Familiarity with STIX/TAXII, YARA, Sigma, Snort, Suricata, malware analysis concepts, and intelligence automation techniques.
- Experience with Python, data mining, Elasticsearch, ELK Stack, Databricks, large-scale data analysis, and threat intelligence correlation workflows.
- Industry certifications such as GCTI, CTIA, GCIH, GCFA, CISSP, or equivalent cybersecurity and threat intelligence certifications.

📌 Cyber Threat Intelligence Analyst_ 5+ years (Mumbai)
🏢 Atyeti
📍 Mumbai