> Markdown version of [/jobs/ext/486399-threat-intelligence-analyst](https://www.wearedevelopers.com/jobs/ext/486399-threat-intelligence-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Threat Intelligence Analyst - **Company:** TENEX SECURITY, INC. - **Location:** Overland Park, KS, United States - **Contract:** Permanent contract - **Skills:** Microsoft Basic Data Partition, Profiling, CompTIA Security+, Cyber Security, Python (Programming Language), Open Source Intelligence, Security Information and Event Management, Scripting, Mitre Att&ck, Malware, Cyber Threat Analysis, Pyramid - **Published:** June 5, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=48608147e40d9b06 ## About the Role Do you have experience in Writing skills?, * Experience: 2-4 years of experience in cybersecurity, with at least 1-2 years in a threat intelligence, SOC, or closely related role. * Knowledge: Working familiarity with the Intelligence Cycle and common threat frameworks (e.g., MITRE ATT&CK, Cyber Kill Chain, Pyramid of Pain). * Research Skills: Hands-on experience with OSINT tools and techniques (e.g., Shodan, VirusTotal, WHOIS). * Communication: Strong writing skills with the ability to summarize threats in a clear, business-relevant way. * Analytical Mindset: Awareness of structured analytic techniques and a commitment to objective, evidence-based assessments. Technical Skills & Tools * TIP: Exposure to or willingness to learn Threat Intelligence Platforms (e.g., ThreatConnect, OpenCTI). * SIEM: Basic familiarity with SIEM systems and log-based investigation. * Standard Formats: Awareness of STIX/TAXII protocols for threat intelligence sharing. * Malware Literacy: Ability to read a sandbox report and extract basic indicators such as C2 infrastructure. * Scripting: Exposure to Python or similar scripting for basic data tasks is a plus., * Holds or is actively pursuing a relevant certification (e.g., CompTIA Security+, BTL1, or working toward GCTI). * Curious by nature - you don't just flag a malicious IP, you want to understand who is behind it and why. * Follows security researchers and threat intel communities online to stay current on emerging threats and zero-day disclosures. * Stays composed and methodical when supporting the team during active security incidents. * Eager to grow into deeper adversary profiling, dark web research, and advanced analytic tradecraft over time. ## Description We are looking for an investigative Threat Intelligence Analyst to join our Cybersecurity team. You will be responsible for identifying, evaluating, and communicating threats to our organization. Your primary mission is to turn the "noise" of the global threat landscape into clear, actionable intelligence that our Security Operations Center (SOC) and leadership can use to protect our customers. You will also be instrumental in the building and development of our threat intelligence program, collaborating with various security functions, and proactively identifying and helping to mitigate risks., * The Intelligence Cycle: Support all phases of the intelligence lifecycle - planning, collection, analysis, production, and dissemination - under the guidance of senior analysts. * Adversary Research: Research known threat actors and groups, mapping observed Tactics, Techniques, and Procedures (TTPs) to the MITRE ATT&CK framework to help identify potential gaps in current defenses. * Threat Landscape Monitoring: Monitor open sources, industry feeds, and relevant forums to contribute to "big picture" reporting on how the threat environment is evolving. * Tactical Support: Collect and help validate technical Indicators of Compromise (IOCs) from malware reports and OSINT sources to support blocklist hygiene and reduce noise. * Threat Intelligence Collection: Proactively research and collect threat intelligence from open-source intelligence (OSINT), commercial feeds, and internal security data. * Reporting: Assist in producing written reports, including Flash Alerts for urgent threats and contributions to monthly blogs or executive summaries. * Vulnerability Intelligence: Monitor vulnerability disclosures and exploit trends, surfacing relevant findings for review and escalation. * Cross-Functional Collaboration: Work alongside technical teams (e.g., Incident Response, SOC) and help communicate threat findings to non-technical stakeholders in plain language. ## Related Videos - [Enhancing Workload Security in Kubernetes](https://www.wearedevelopers.com/videos/356-enhancing-workload-security-in-kubernetes) - [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data) - [SMART Test Automation - the experience of legacy transformation](https://www.wearedevelopers.com/videos/100215-smart-test-automation-the-experience-of-legacy-transformation) - [Profiling Symfony & PHP apps with Blackfire](https://www.wearedevelopers.com/videos/265-profiling-symfony-php-apps-with-blackfire) - [Full Spectrum File Uploads](https://www.wearedevelopers.com/videos/870-full-spectrum-file-uploads) - [Testing AI Agents: Automated Evaluation for Chatbots & RAG Systems](https://www.wearedevelopers.com/videos/100300-testing-ai-agents-automated-evaluation-for-chatbots-rag-systems) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy) - [Dev Digest 191: Malware interviews, EU ❤️ Open Source and Skilled Agents](https://www.wearedevelopers.com/magazine/645-dev-digest-191-malware-interviews-eu-open-source-and-skilled-agents) - [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)