> Markdown version of [/jobs/ext/4588052-cyber-threat-intelligence-analyst-remote-pst](https://www.wearedevelopers.com/jobs/ext/4588052-cyber-threat-intelligence-analyst-remote-pst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cyber Threat Intelligence Analyst (REMOTE - PST)

- **Company:** Insight Global
- **Location:** Cary, NC, United States
- **Experience:** Experienced
- **Contract:** Permanent contract
- **Skills:** Artificial Intelligence, Bash Shell, Cyber Security, Computer Telephony Integration, Domain Name System (DNS), Python (Programming Language), Link Analysis, Open Source Intelligence, Windows PowerShell, Security Information and Event Management, Scripting, Large Language Models, Mitre Att&ck, Malware, Cyber Threat Analysis, Agentic-AI, Cybercrime, Splunk
- **Published:** November 5, 2026
- **Apply:** https://www.techcareers.com/job.asp?id=3496646085&tx=JJ5145FFF&pt=1&aff=0B19D771-A501-4A5E-8338-2A822B784D54&utm_source=Job%20Feed&utm_medium=textkernel&utm_campaign=DE&utm_term=0B19D771-A501-4A5E-8338-2A822B784D54

## About the Role

? 3+ years of experience in cyber threat intelligence, threat hunting, security operations, or incident response. ? Experience using LLMs, AI agents, or automation to speed up intelligence collection and triage. ? Working knowledge of the intelligence lifecycle and analytic frameworks such as MITRE ATT&CK, the Diamond Model, or the Cyber Kill Chain. ? Experience querying security telemetry in tools such as Splunk, CrowdStrike, or similar SIEM and EDR platforms. ? Experience with threat intelligence sources and platforms such as Flashpoint, Recorded Future, VirusTotal, or similar. ? Hands-on OSINT and infrastructure analysis skills, including: ? Passive DNS and WHOIS ? Certificate transparency ? Hosting and IP pivoting ? Underground forum and marketplace research ? Scripting experience (Python, PowerShell, Bash, etc.) to automate collection, enrichment, or hunting. ? Clear written communication for both technical teams and leadership audiences. ? Sound judgment and
discretion when handling sensitive information. ? Experience with setting up monitoring platforms or TIP ? Experience in gaming, technology, or consumer platforms with large user bases. ? Familiarity with infostealer malware, credential markets, and the criminal ecosystems behind them. ? Experience writing or contributing to detections (Splunk SPL, Sigma, YARA, or similar). ? Experience with link analysis or graphing tools to map threat actor infrastructure. ? GCTI, GCIH, GCFA, CTIA, or similar certifications.

## Description

Insight Global's client, a leading company within the Gaming & Technology industry, is seeking a Cyber Threat Intelligence Analyst to support its growing threat intelligence function. This team operates across traditional cyber threat intelligence, gaming-specific intelligence, leak/IP investigations, and emerging security threats.

The immediate need is for experienced CTI practitioners who can help evaluate a high volume of threat information, identify meaningful signals, investigate relevance to their environment, and turn intelligence into actionable security outcomes.

The ideal candidate is a persistent, curious problem-solver who is comfortable operating independently in a fast-moving environment and actively embraces AI and automation to improve the speed and effectiveness of intelligence work.

Core Responsibilities * Monitor and analyze cyber threat intelligence from internal and external sources. * Evaluate threat reporting and determine its potential relevance to Epic. * Analyze indicators, TTPs, attacker infrastructure, and emerging threat activity. * Investigate security telemetry and log data to validate potential threats. * Help differentiate meaningful security signals from high-volume intelligence noise. * Translate intelligence into actionable outcomes such as detections, mitigations, takedowns, investigations, or hardening recommendations. * Support incident response with relevant threat intelligence and analysis. * Conduct OSINT and threat infrastructure research. * Partner with CTI, Security Operations, Threat Hunting, Security Engineering, and other InfoSec teams. * Leverage AI/LLMs and automation to accelerate intelligence collection, enrichment, analysis, and triage. * Continuously learn new technology and identify opportunities to improve CTI processes.