CTI Analyst III

Key Responsibilities

• Collect, analyze, and disseminate actionable cyber threat intelligence (CTI) to support operational defense, Incident response, vulnerability management, risk awareness, and decision-making for the organization.
• Support the daily operational execution of the CTI function, ensuring tactical and operational intelligence products align with defined CTI priorities and stakeholder requirements.
• Produce comprehensive threat assessments and intelligence reports, contextualizing threats relevant to the organization, including those targeting the healthcare sector and regulated environments.
• Acquire, curate, and manage threat intelligence from a range of sources, including open source, commercial feeds, dark web, and industry sharing groups.
• Collaborate with internal teams (e.g., Security Operations Center, Incident Response, Risk Management) and external partners to share intelligence, coordinate responses, and drive proactive defense measures.
• Mentor and provide technical leadership to junior analysts, fostering skill development and adherence to intelligence analysis standards.
• Drive innovation in CTI processes, tools, and methodologies, continuously seeking opportunities to improve intelligence quality and operational impact.
• Serve as a subject matter expert for tactical and operational CTI workflows, ensuring documentation, quality assurance, and process optimization.

Skills And Experience

• Advanced knowledge of cyber threat intelligence lifecycle, including data collection, analysis (using structured analytical techniques), and intelligence dissemination.
• Strong analytical, investigative, and critical thinking skills, with the ability to synthesize complex technical data into actionable intelligence.
• Proficiency in using threat intelligence platforms, SIEM tools, network analysis (NETFLOW, PCAP), malware analysis (static and dynamic), and open-source intelligence (OSINT) techniques.
• Deep understanding of intrusion detection/prevention systems, incident response, attack methodologies, and security operations.
• Experience applying intelligence frameworks such as the Cyber Kill Chain, MITRE ATT&CK, and Analysis of Competing Hypotheses (ACH).
• Excellent verbal and written communication skills for producing intelligence products and presenting findings to technical and non-technical audiences.
• Demonstrated ability to mentor CTI analysts and collaborate effectively across multidisciplinary teams.