> Markdown version of [/jobs/ext/1956508-senior-cyber-threat-intelligence-cti-analyst](https://www.wearedevelopers.com/jobs/ext/1956508-senior-cyber-threat-intelligence-cti-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Senior Cyber Threat Intelligence (CTI) Analyst

- **Company:** Intersources Inc.
- **Location:** New York, NY, United States
- **Experience:** Expert
- **Contract:** Temporary contract
- **Skills:** Profiling, Cyber Security, Computer Telephony Integration, Open Source Technology, Conversion Tracking, Mitre Att&ck, Cyber Threat Analysis, Cybercrime
- **Published:** August 6, 2026
- **Apply:** https://www2.jobdiva.com/portal/?a=62jdnw10t7d77ytz0lbaey9qxonk3b05a9tqw96rb7z6hlfo7xj79l9g6mp6aj2o&compid=0/jobs/31886511#/jobs/31886511

## About the Role

The ideal candidate brings prior experience working within a Cyber Security Operations Center (CSOC), providing a strong foundation in security monitoring, incident escalation, and operational workflows. However, this position is intentionally designed as a progression beyond traditional SOC analyst responsibilities. Success in this role depends on the ability to move from reactive alert handling to proactive threat analysis, intelligence production, and strategic insight bridging the gap between real-time security operations and long-term threat awareness. The Senior CTI Analyst will partner closely with SOC, incident response, and engineering teams to ensure intelligence is relevant, timely, and operationally meaningful.

## Description

The Senior Cyber Threat Intelligence (CTI) Analyst will serve as a strategic force multiplier in protecting Clients infrastructure by identifying, analyzing, and contextualizing cyber threats before they materialize into operational impact. This role requires a forward-leaning, highly analytical professional who can synthesize technical indicators, adversary behaviors, and geopolitical developments into actionable intelligence that informs security operations and leadership decision-making across Client's transportation and enterprise environments., * Threat Intelligence Collection & Analysis, gather, analyze, and correlate data from multiple sources (open-source, commercial feeds, ISACs, government advisories) to identify emerging threats.

 * Produce tactical, operational, and strategic intelligence reports for internal stakeholders.
Geopolitical & Regional Threat Monitoring

 * Track geopolitical events and conflicts that may impact critical transportation infrastructure.
Assess how global and regional developments influence cyber threat actors targeting North American transportation networks.

 * Critical Infrastructure Protection
 * Identify and assess threats specific to transportation systems, including rail, subway, and supporting operational technology (OT).
 * Collaborate with internal teams to provide intelligence-driven recommendations for risk mitigation.
Threat Actor Profiling & Campaign Tracking

 * Monitor and analyze activities of nation-state actors, cybercriminal groups, and hacktivists targeting transportation and critical infrastructure sectors.
 * Maintain profiles of adversaries, their tactics, techniques, and procedures (TTPs) aligned with MITRE ATT&CK framework.
 * Collaboration & Information Sharing
 * Engage with industry peers, ISACs, and government agencies to share intelligence and best practices.
Support incident response teams with contextual intelligence during active investigations.
Reporting & Briefing

 * Deliver timely intelligence briefings to leadership and operational teams.
 * Create dashboards and reports highlighting threat trends, vulnerabilities, and risk assessments.


## Related Videos

- [Fighting the Next Wave of Cybercrime](https://www.wearedevelopers.com/videos/100331-fighting-the-next-wave-of-cybercrime)
- [Profiling Symfony & PHP apps with Blackfire](https://www.wearedevelopers.com/videos/265-profiling-symfony-php-apps-with-blackfire)
- [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data)
- [Deep Fakes: The Lies We Can’t See](https://www.wearedevelopers.com/videos/1187-deep-fakes-the-lies-we-can-t-see)
- [Enhancing Workload Security in Kubernetes](https://www.wearedevelopers.com/videos/356-enhancing-workload-security-in-kubernetes)
- [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology)
- [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)
- [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries)
- [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers)
- [Coffee with Developers - Maria Apazoglou - Making AI understandable for all in production](https://www.wearedevelopers.com/magazine/475-coffee-with-developers-maria-apazoglou-making-ai-understandable-for-all-in-production)