Security Analyst

About the role

Our client, a leading convenience retail, fuel operations, and supply chain provider, is seeking a Security Analyst to monitor and analyze cyber threats, threat actors, campaigns, vulnerabilities, and emerging attack techniques. The analyst will transform open‑source, commercial, and internal security data into actionable intelligence, helping the organization understand its adversaries, assess exposure, prioritize defenses, and strengthen its overall security posture.

Responsibilities

• Collect, monitor, and analyze threat intelligence from OSINT, industry information‑sharing groups, commercial feeds, internal telemetry, and other relevant sources.
• Track threat actors, campaigns, malware families, adversary infrastructure, and tactics, techniques, and procedures (TTPs) using frameworks such as MITRE ATT&CK.
• Analyze indicators of compromise (IOCs), malware behavior, adversary infrastructure, and internal security telemetry to identify potential targeting, exposure, and risk.
• Develop and deliver finished intelligence products, including threat advisories, actor profiles, campaign briefs, trend reports, and executive‑level briefings.
• Translate threat intelligence into actionable detection logic, threat‑hunting hypotheses, SIEM/EDR content, and vulnerability prioritization recommendations in partnership with security teams.
• Provide threat context and intelligence support during incident response, red/purple team exercises, adversary emulation, and vulnerability management activities.
• Administer and tune the organization’s Threat Intelligence Platform (TIP), manage intelligence feeds and IOC lifecycles, and continuously refine collection requirements based on stakeholder needs.

Required qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, Intelligence Studies, or a related field, or equivalent professional experience.
• 3+ years of experience in threat intelligence, security operations, incident response, or a related cybersecurity discipline.
• Working knowledge of MITRE ATT&CK, the intelligence cycle, and structured analytic techniques.
• Hands‑on experience analyzing malware behavior, indicators of compromise (IOCs), and adversary infrastructure.
• Familiarity with SIEM, EDR, and Threat Intelligence Platform (TIP) technologies.
• Strong written and verbal communication skills, including the ability to translate complex technical findings for non‑technical and executive audiences.
• Demonstrated analytical judgment, including the ability to assess confidence levels, identify uncertainty, prioritize competing intelligence requirements, and work effectively under time pressure.

Preferred qualifications

• Industry certification such as GCTI, GCFA, CTIA, CISSP, or a comparable cybersecurity/intelligence certification.
• Experience working with commercial and open‑source threat intelligence feeds and intelligence‑sharing communities.
• Experience with dark web monitoring, closed forums, ISAC/ISAO feeds, or other specialized intelligence collection sources.
• Experience developing threat‑hunting hypotheses, detection content, or SIEM/EDR rules based on intelligence findings.
• Experience supporting vulnerability prioritization using active exploitation, threat actor interest, and exploitation likelihood data.
• Experience with red team, purple team, adversary emulation, or threat‑informed defense programs.
• Experience in convenience retail, fuel operations, supply chain, or other highly distributed enterprise environments.

Key competencies & behaviors

• Ability to evaluate complex threat information, identify meaningful patterns, and develop well‑supported assessments.
• Clearly communicates technical intelligence and risk to both cybersecurity professionals and executive stakeholders.
• Effectively manages multiple intelligence requirements and focuses efforts on threats with the greatest potential organizational impact.
• Responds effectively to rapidly evolving threats, emerging attack techniques, and changing stakeholder requirements.
• Builds productive relationships across SOC, Incident Response, Vulnerability Management, Detection Engineering, leadership, and external intelligence communities.

Work environment

Location: Irving, TX
Work arrangement: Onsite

Schedule

Full‑time; occasional after‑hours support may be required.

Pay

The approximate pay range for this position is between $36.00 and $52.00 per hour. Final compensation may vary based on factors including but not limited to background, knowledge, skills, and location. We comply with local wage minimums.

Benefits

• Medical, Dental, & Vision Insurance Plans
• Employee‑Owned Profit Sharing (ESOP)
• 401K offered