Security Analyst Incident Response & Threat Intelligence

We are seeking a Security Analyst, Incident Response & Threat Intelligence to support threat hunting, threat intelligence, incident response, and exposure-focused analysis within the GTS – Security & Compliance team. This role works closely with Senior Analysts and security leadership, contributing to investigations, security operations, and proactive analysis across a global enterprise environment.

Key Responsibilities

• Support proactive threat hunting, threat intelligence, and incident response activities in collaboration with Senior Analysts
• Execute hypothesis-driven threat hunts and investigative analysis across endpoint, identity, cloud, and network telemetry
• Assist in assessing, investigating, and responding to high-priority security events under the guidance of senior analysts and management
• Analyze adversary behavior using MITRE ATT&CK and current realworld threat activity
• Partner with Vulnerability Management to apply threat intelligence to vulnerability prioritization, risk assessment, and remediation efforts
• Contribute to exposure management by identifying misconfigurations, attack paths, and chained weaknesses across the environment
• Help translate intelligence findings, hunt results, and exposure insights into actionable detection and response recommendations
• Collaborate with SOC, Privacy, Legal, Compliance, IT, Vulnerability Management, and business stakeholders during investigations
• Produce clear, well-structured documentation and investigation summaries for leadership and incident records Skills:
• 3 years+ of experience in Threat Intelligence, Threat Hunting, or Incident Response roles
• Demonstrated experience supporting investigations and proactive security analysis within enterprise environments
• Strong hands-on experience with EDR platforms and SIEM / log analytics tools
• Solid understanding of vulnerability exploitation, exposure management, and attack path analysis
• Strong knowledge of adversary tradecraft, attacker behavior, and modern intrusion techniques
• Ability to operate independently, think critically, and make sound decisions under pressure while collaborating with senior analysts
• Strong written and verbal communication skills, with the ability to clearly document findings and explain technical issues to varied audiences
• No direct people management responsibilities
• May provide technical guidance and informal mentorship to peers during investigations, as appropriate Education:
• Bachelor’s degree in Cybersecurity, Computer Science, or a related field, or equivalent practical experience
• 3+ years of hands-on experience in Threat Intelligence, Threat Hunting, or Incident Response may substitute for formal education
• Industry certifications are preferred but not required, including: o GIAC (GCIA, GCIH, GCED, GCIR, GNFA, GCFA) o Offensive Security (OSCP, OSCE) o Red Team / Adversary Emulation (CRTO, CRTP, CRTA) o Digital Forensics & Incident Response (GCFA, GNFA, CFCE, EnCE)