> Markdown version of [/jobs/ext/3044110-cyber-threat-intelligence-analyst](https://www.wearedevelopers.com/jobs/ext/3044110-cyber-threat-intelligence-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cyber Threat Intelligence Analyst - **Company:** Búsqueda Avanzada - **Location:** Madrid, Spain (Remote available) - **Contract:** Permanent contract - **Skills:** CompTIA Security+, Cyber Security, Computer Telephony Integration, Decision Support Systems, Intelligence Analysis, Cyber Threat Analysis - **Published:** September 24, 2026 - **Apply:** https://www.adzuna.es/contact-us.html ## About the Role + Target background: Suitable for aspiring Cyber Threat Intelligence Analysts, cybersecurity students and graduates, SOC professionals seeking CTI exposure, career changers, intelligence or security professionals transitioning into cyber, self-taught practitioners, and professionals holding relevant cybersecurity certifications. + Threat intelligence: Understanding of core cyber threat intelligence concepts, including threat assessment, intelligence requirements, source evaluation, threat prioritization, and adversary analysis. + Analytical reasoning: Strong critical-thinking and structured-analysis skills, with the ability to evaluate incomplete information and reach evidence-based judgments. + Threat assessment: Ability to analyze threat actors, TTPs, indicators, organizational exposure, and potential impact within a broader intelligence context. + Source analysis: Ability to assess the credibility, reliability, relevance, and limitations of available information. + Intelligence communication: Ability to communicate complex findings clearly and adapt analysis for both technical and senior business audiences. + Decision support: Ability to convert intelligence findings into practical, decision-useful insights and proportionate defensive recommendations. + Evidence-based thinking: Ability to identify assumptions, intelligence gaps, competing hypotheses, and confidence levels rather than overstating certainty. + Adaptability: Comfortable working with incomplete or evolving information and updating assessments when new evidence becomes available. + Ethical approach: Commitment to using cybersecurity knowledge and analytical capabilities for legitimate defensive, educational, and professional-development purposes. + Professional development: Willingness to build practical evidence of CTI capabilities through structured simulations and professional analytical artefacts. ## Description This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Cyber Threat Intelligence Analyst based in Spain. As a Cyber Threat Intelligence Analyst, you will develop practical experience turning incomplete and complex threat information into actionable intelligence. You will assess sources, threat actors, tactics, techniques, indicators, and intelligence gaps within realistic simulated environments. The role focuses on understanding what threats mean, why they matter, and what organizations should consider doing next. You will practice structured analytical reasoning, evaluate competing hypotheses, and communicate confidence and uncertainty effectively. Your work will include producing intelligence assessments and translating technical findings into concise insights for decision-makers. The experience is designed for aspiring analysts, cybersecurity professionals, students, graduates, career changers, and self-taught practitioners. All activities are conducted within controlled simulations for legitimate defensive, educational, and professional-development purposes. Accountabilities + Threat-information triage: Review multiple pieces of simulated threat information and determine which intelligence is relevant to organizational priorities and warrants further investigation. + Source evaluation: Assess the reliability, credibility, relevance, and quality of intelligence sources and explain how these factors affect analytical confidence. + Threat-actor analysis: Examine available intelligence on simulated threat actors to assess motivation, capabilities, targeting patterns, behaviors, and relevance to an organization. + TTP analysis: Analyze simulated tactics, techniques, and procedures associated with malicious activity and determine their implications for defensive priorities. + Indicator analysis: Evaluate indicators of compromise within their broader context, considering their evidential significance rather than treating individual indicators as conclusive. + Intelligence requirements: Identify critical intelligence gaps and define the additional information needed to support better organizational decision-making. + Threat prioritization: Compare multiple simulated threats and determine their relative importance based on organizational relevance, likelihood, potential impact, and available evidence. + Structured analysis: Evaluate competing explanations or hypotheses and communicate why the available evidence supports one assessment more strongly than another. + Threat assessment: Synthesize information from multiple sources into clear assessments explaining what is happening, why it matters, and what defensive actions should be considered. + Confidence assessment: Clearly communicate the level of confidence associated with intelligence judgments, including assumptions, evidence limitations, and areas of uncertainty. + Executive communication: Translate technical threat information into concise, decision-relevant intelligence suitable for senior stakeholders. + Defensive recommendations: Develop proportionate defensive priorities based on intelligence findings and within the scope of legitimate defensive security. + Assessment updates: Reassess previous judgments when new information becomes available and demonstrate how additional evidence changes-or confirms-the original assessment. + Professional artefacts: Produce practical intelligence outputs such as threat assessments, threat-actor profiles, executive briefs, intelligence requirements documents, TTP assessments, indicator assessments, confidence statements, and intelligence updates. ## Related Videos - [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Your First Pitch Is to AI: How to Make Your Brand/Product Visible in the Age of Generative Search](https://www.wearedevelopers.com/videos/100121-your-first-pitch-is-to-ai-how-to-make-your-brand-product-visible-in-the-age-of-generative-search) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large) - [Reporting Active Exploits in 24 Hours: Are You Ready for the CRA?](https://www.wearedevelopers.com/videos/100248-reporting-active-exploits-in-24-hours-are-you-ready-for-the-cra) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market) - [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries) - [Coffee with Developers - Maria Apazoglou - Making AI understandable for all in production](https://www.wearedevelopers.com/magazine/475-coffee-with-developers-maria-apazoglou-making-ai-understandable-for-all-in-production) - [System change: restart as developer?](https://www.wearedevelopers.com/magazine/39-system-change-restart-as-developer) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)