Senior Analyst, Threat Intelligence & Incident Response

We are seeking a highly skilled Senior Threat Intelligence & Incident Response Analyst to join our clinets GTS – Security & Compliance team. This role will lead proactive threat hunting, threat intelligence analysis, incident response, and exposure-focused security investigations across a global enterprise environment.

Operating under security leadership guidance, this position requires a self-starter who is a quick responder, critical thinker, and capable of independently driving complex investigations while proactively identifying attacker pathways. This position is a 12 month contract with the possibility of extension.

Key Responsibilities

Lead proactive threat hunting, threat intelligence, and incident response activities

Conduct hypothesis-driven threat hunts, including attack path and exposure-based analysis across endpoint, identity, cloud, and network telemetry

Rapidly assess, investigate, and respond to high-priority security events

Analyze adversary behavior using the MITRE ATT&CK framework and real-world threat activity

Partner with Vulnerability Management to apply threat intelligence to vulnerability prioritization, risk assessment, and remediation workflows based on exploitability and enterprise exposure

Support exposure management initiatives by identifying attack paths, misconfigurations, and chained weaknesses within the technology stack

Translate intelligence findings and hunt insights into actionable response guidance and security recommendations

Collaborate with SOC, Privacy, Legal, Compliance, IT, CrowdStrike , Vulnerability Management, and business stakeholders to coordinate investigations and risk-driven response efforts

Produce clear, executive-level documentation and incident briefings for senior leadership

Required Qualifications

5+ years of experience in Threat Intelligence, Threat Hunting, or Incident Response roles

Proven experience leading investigations and proactive security analysis in enterprise environments

Strong hands-on experience with EDR platforms and SIEM/log analytics tools

Deep understanding of vulnerability exploitation, exposure management, and attack path analysis

Strong knowledge of adversary tradecraft and modern intrusion techniques

Demonstrated ability to operate independently and make sound decisions under pressure

Strong written and verbal communication skills

Education & Certifications

Bachelor’s degree in Cybersecurity or related field (or equivalent experience)

5+ years of hands-on Threat Intelligence, Threat Hunting, or Incident Response experience may substitute for formal education

Industry certifications preferred but not required, including:

GIAC (GCIA, GCIH, GCED, GCIR, GNFA, GCFA)

OSCP / OSCE

CRTO / CRTP

CRTA

DFIR-focused certifications (GCFA, GNFA, CFCE, EnCE)

About