Senior Threat Intelligence Analyst

Job Description

The Senior Threat Intelligence Analyst is responsible for conducting in-depth research, documenting threats, understanding the risk to the business, and sharing information with those who need to know. Among the research conducted, the analyst will seek to uncover patterns and trends and be forward-thinking as to how threats may evolve. Furthermore, the analyst will participate in simulation exercises designed to uncover weaknesses related to threats, with the goal of implementing defensive solutions prior to attacks and disrupting attacks in progress. The analyst will also distill threat intelligence so technical and non-technical contacts can understand it and make educated decisions about next-step actions.

Essential Functions:   Reasonable accommodations may be made to enable individuals with disabilities to perform the essential duties.

• Research and report current and emerging threats facing the business and industry sector.
• Track threat actor infrastructure and associated malware families.
• Centralize multiple threat sources (premium, industry-shared, open-source, dark web), correlate indicators and threats, and distill actionable intelligence.
• Use automation to efficiently streamline and de-duplicate threats for playbooks but use human analysis for actionable decision-making.
• Actively hunt for exposures and identify incidents warranting action to disrupt and remediate threats.
• Use and assign indicator severity and impact ratings to determine appropriate plans of action.
• Document threats into contextual reports outlining severity, urgency, and impact, and ensure they can be understood by both management and technical teams.
• Serve as a trusted advisor to establish credibility with business unit leadership and technical teams.
• Share relevant information with stakeholders and make recommendations for next steps when facing threats.
• Actively participate in threat hunting tabletop exercises to hone and strengthen skills across the team.
• Evaluate and implement deception techniques designed to thwart adversaries.
• Work closely with security leadership to instill cybersecurity policies and practices throughout business units to address security operations, incident response, application security, and infrastructure.
• Actively inform and engage in security projects across the business to disrupt active or potential threats.
• Be readily available to participate in collaborative threat analysis meetings with internal and external trusted entities.
• Maintain an up-to-date level of knowledge related to security threats, vulnerabilities, and mitigations to reduce attack surface, and circulate it through business units.

Supervisory Responsibilities:  This position has no formal supervisory responsibilities.

Minimum Required Qualifications:   

• 5-7 years of cybersecurity experience (or information technology coupled with cybersecurity), with at least 3-5 years in an intelligence or incident response security practitioner role.
• Demonstrated experience conducting tabletop exercises and adversary emulation.

• Applicable knowledge of adversary tactics, techniques, and procedures (TTPs), MITRE ATT&CK framework, CVSS, open source intelligence (OSINT), and deception techniques.
• Proficient in SIEM, intrusion detection and prevention systems (IDS/IPS), threat intelligence platforms, and security orchestration, automation, and response (SOAR) solutions.
• Ability to analyze incident logs, assess malware, and understand vulnerabilities and exploits, along with strong operating systems knowledge.
• Proven threat hunting experience and ability to track adversaries.
• Proficient with Python, PowerShell, and Bash.
• Proficient in the Microsoft Office Suite (Excel, Word, PowerPoint and SharePoint)
• Ability to travel up to 10% of the time.
• Ability to clear required background check.

Desired Qualifications:

• Bachelor’s degree in computer science, Information Systems, Information Security & Assurance, Engineering, or a related technical field.

Work Environment:  The work environment characteristics described here are representative of those an employee encounters while performing the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

• This position is remote and open to residents of the 50 states, D.C.

Compensation & Benefits: Stride, Inc. considers a person’s education, experience, and qualifications, as well as the position’s work location, expected quality and quantity of work, required travel (if any), external market and internal value when determining a new employee’s salary level.  Salaries will differ based on these factors, the position’s level and expected contribution, and the employee’s benefits elections.  Offers will typically be in the bottom half of the range.

• We anticipate the salary range to be $81,045.74- $201,088.80. The upper end of this range is not likely to be offered, as an individual’s compensation can vary based on several factors. These factors include, but are not limited to, geographic location, experience, training, education, and local market conditions. Eligible employees may receive a bonus. Stride offers a robust benefits package for eligible employees that can include health benefits, retirement contributions, and paid time off.

The above job is not intended to be an all-inclusive list of duties and standards of the position. Incumbents will follow any other instructions, and perform any other related duties, as assigned by their supervisor.  All employment is “at-will” as governed by the law of the state where the employee works.  It is further understood that the “at-will” nature of employment is one aspect of employment that cannot be changed except in writing and signed by an authorized officer. 

Job Type

The above job is not intended to be an all-inclusive list of duties and standards of the position. Incumbents will follow any other instructions, and perform any other related duties, as assigned by their supervisor. All employment is “at-will” as governed by the law of the state where the employee works.  It is further understood that the “at-will” nature of employment is one aspect of employment that cannot be changed except in writing and signed by an authorized officer.

Stride, Inc. is a Federal Contractor, an Equal Opportunity/Affirmative Action Employer and a Drug-Free Workplace. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, protected Veteran status age, or genetics, or any other characteristic protected by law.

Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities

The contractor will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor’s legal duty to furnish information. 41 CFR 60-1.35(c)