Lead Cyber Intelligence Analyst

• Lead Cyber Intelligence Analyst
• 📍 Location: Irving, TX, US
• 🏢 Industry: Hospitals and Health Care
• 💼 Work Setting: On-site

Are you passionate about cyber threat intelligence, uncovering adversary activity, and transforming security data into actionable intelligence that protects critical business operations and sensitive information? We are seeking a Lead Information Security Analyst to drive advanced cyber threat intelligence initiatives, identify emerging threats, and provide strategic insights that strengthen organizational security posture. This role combines threat research, intelligence analysis, incident response collaboration, threat attribution, and technical leadership to help security teams proactively detect, investigate, and mitigate evolving cyber risks.

• Key Responsibilities
• Cyber Threat Intelligence & Threat Research
• Identify, analyze, and track emerging cyber threats, adversary campaigns, and evolving attack techniques.
• Discover and investigate previously unidentified threat activity across enterprise environments.
• Develop intelligence assessments that support proactive security operations and risk reduction.
• Translate complex threat activity into actionable intelligence for technical and business stakeholders.
• Monitor the threat landscape to identify risks relevant to organizational operations and industry sectors.
• Threat Detection & Incident Support
• Support threat hunting, incident response, and security monitoring teams with timely intelligence and behavioral analysis.
• Develop detailed attack chains and adversary activity profiles to support active investigations.
• Partner with security operations teams to improve detection capabilities and response effectiveness.
• Provide intelligence that enables proactive threat identification and mitigation.
• Help prioritize security actions based on threat severity, likelihood, and business impact.
• Threat Actor Analysis & Attribution
• Lead attribution efforts by collecting, correlating, and analyzing intelligence from multiple sources.
• Develop and maintain threat actor profiles, tracking adversary behaviors, infrastructure, and tactics.
• Analyze attacker methodologies, objectives, and operational patterns.
• Document threat intelligence findings and maintain knowledge repositories supporting ongoing investigations.
• Support strategic understanding of threat actors through structured intelligence analysis.
• Security Intelligence Production
• Produce intelligence reports, briefings, assessments, and technical documentation for cybersecurity teams and leadership.
• Leverage internal telemetry, open-source intelligence, industry reporting, and investigative findings to generate actionable insights.
• Develop intelligence products tailored to incident response, threat hunting, detection engineering, and security leadership audiences.
• Improve intelligence quality, consistency, and operational relevance.
• Ensure intelligence outputs support informed decision-making and risk management.
• Security Analytics & Automation
• Utilize automation and advanced analytical techniques to enhance intelligence workflows.
• Develop processes that improve intelligence collection, enrichment, correlation, and dissemination.
• Leverage AI-enabled tools and technologies to accelerate investigations and threat analysis.
• Support automated intelligence-to-detection workflows that improve operational efficiency.
• Identify opportunities to scale intelligence capabilities through automation and innovation.
• Threat Intelligence Operations
• Analyze security telemetry from multiple sources including endpoint, network, cloud, identity, and infrastructure environments.
• Correlate indicators, attack patterns, and behavioral characteristics across datasets.
• Support intelligence-driven security operations through continuous monitoring and analysis.
• Improve organizational visibility into adversary activity and emerging risks.
• Contribute to intelligence lifecycle management and operational maturity initiatives.
• Collaboration & Cross-Functional Leadership
• Partner closely with security operations, incident response, detection engineering, threat hunting, risk management, legal, compliance, and technology teams.
• Represent threat intelligence interests in cross-functional planning and security initiatives.
• Support development of intelligence requirements aligned with business and security priorities.
• Communicate intelligence findings clearly to both technical and executive audiences.
• Build strong collaborative relationships across cybersecurity and enterprise teams.
• Technical Leadership & Mentorship
• Provide mentorship and guidance to analysts and intelligence team members.
• Promote best practices in threat intelligence analysis, source validation, and investigative methodologies.
• Support development of analytic standards, frameworks, and procedures.
• Contribute to the growth and maturity of threat intelligence capabilities across the organization.
• Lead by example through high-quality intelligence production and technical expertise.
• Intelligence Program Development
• Support the evolution and maturity of cyber threat intelligence programs and operating models.
• Improve intelligence collection, analysis, reporting, and sharing processes.
• Help establish standards for source validation, confidence assessments, and structured analysis.
• Contribute to long-term intelligence strategy and capability development.
• Drive continuous improvement initiatives that strengthen intelligence effectiveness and operational impact.

• Required Qualifications
• Bachelor's degree in Cybersecurity, Information Security, Computer Science, Information Systems, or a related field, or equivalent practical experience.
• 10+ years of experience in cybersecurity, threat intelligence, threat research, incident response, or related security disciplines.
• Experience conducting advanced threat intelligence analysis and cyber threat investigations.
• Strong understanding of cyber adversaries, attack techniques, and threat actor behaviors.
• Experience working with security telemetry and enterprise security monitoring technologies.

• Technical Skills
• Cyber Threat Intelligence (CTI)
• Threat Research & Analysis
• Threat Hunting Support
• Threat Attribution
• Adversary Tracking
• Incident Response Collaboration
• Security Analytics
• Intelligence Lifecycle Management
• Threat Modeling
• Security Operations Support
• Detection Engineering Collaboration
• Open-Source Intelligence (OSINT)
• Indicator Analysis & Correlation
• Threat Intelligence Platforms (TIPs)
• Security Automation & Intelligence Workflows

• Preferred Qualifications
• Experience building, maturing, or leading cyber threat intelligence programs.
• Knowledge of structured intelligence methodologies, collection management, and analytic frameworks.
• Experience supporting regulated, healthcare, financial services, or highly governed industries.
• Experience designing intelligence data models, repositories, and large-scale intelligence analysis platforms.
• Relevant industry certifications such as CISSP, GCTI, OSCP, GREM, or similar cybersecurity certifications.