Cyber Threat Intelligence Analyst (REMOTE - PST)

Required Skills & Experience

• 3+ years of experience in cyber threat intelligence, threat hunting, security operations, or incident response.
• Experience using LLMs, AI agents, or automation to speed up intelligence collection and triage.
• Working knowledge of the intelligence lifecycle and analytic frameworks such as MITRE ATT&CK, the Diamond Model, or the Cyber Kill Chain.
• Experience querying security telemetry in tools such as Splunk, CrowdStrike, or similar SIEM and EDR platforms.
• Experience with threat intelligence sources and platforms such as Flashpoint, Recorded Future, VirusTotal, or similar.
• Hands-on OSINT and infrastructure analysis skills, including:
• Passive DNS and WHOIS
• Certificate transparency
• Hosting and IP pivoting
• Underground forum and marketplace research
• Scripting experience (Python, PowerShell, Bash, etc.) to automate collection, enrichment, or hunting.
• Clear written communication for both technical teams and leadership audiences.
• Sound judgment and discretion when handling sensitive information.

Nice to Have Skills & Experience

• Experience with setting up monitoring platforms or TIP
• Experience in gaming, technology, or consumer platforms with large user bases.
• Familiarity with infostealer malware, credential markets, and the criminal ecosystems behind them.
• Experience writing or contributing to detections (Splunk SPL, Sigma, YARA, or similar).
• Experience with link analysis or graphing tools to map threat actor infrastructure.
• GCTI, GCIH, GCFA, CTIA, or similar certifications.

Job Description

Insight Global's client, a leading company within the Gaming & Technology industry, is seeking a Cyber Threat Intelligence Analyst to support its growing threat intelligence function. This team operates across traditional cyber threat intelligence, gaming-specific intelligence, leak/IP investigations, and emerging security threats.

The immediate need is for experienced CTI practitioners who can help evaluate a high volume of threat information, identify meaningful signals, investigate relevance to their environment, and turn intelligence into actionable security outcomes.

The ideal candidate is a persistent, curious problem-solver who is comfortable operating independently in a fast-moving environment and actively embraces AI and automation to improve the speed and effectiveness of intelligence work.

Core Responsibilities

• Monitor and analyze cyber threat intelligence from internal and external sources.
• Evaluate threat reporting and determine its potential relevance to Epic.
• Analyze indicators, TTPs, attacker infrastructure, and emerging threat activity.
• Investigate security telemetry and log data to validate potential threats.
• Help differentiate meaningful security signals from high-volume intelligence noise.
• Translate intelligence into actionable outcomes such as detections, mitigations, takedowns, investigations, or hardening recommendations.
• Support incident response with relevant threat intelligence and analysis.
• Conduct OSINT and threat infrastructure research.
• Partner with CTI, Security Operations, Threat Hunting, Security Engineering, and other InfoSec teams.
• Leverage AI/LLMs and automation to accelerate intelligence collection, enrichment, analysis, and triage.
• Continuously learn new technology and identify opportunities to improve CTI processes.