Lead Threat Intelligence Analyst

Take-Two Interactive; Toronto; On-site; CAD 90,000 - 120,000; Full time

Job summary

A leading entertainment company in Toronto is seeking a Lead Threat Intelligence Analyst to strengthen defenses against security threats. The role involves leading cyber threat intelligence operations, analyzing threats, and producing actionable reports. Ideal candidates will have 5-7 years in cybersecurity and strong analytical skills. Benefits include a supportive company culture, growth opportunities, and comprehensive health benefits.

Benefits

Fitness allowance

Employee discounts

Free games and events

Stocked pantries

Qualifications

• 5-7 years of experience in cybersecurity, with a minimum of 3 years in a threat intelligence role.
• Strong understanding of the cyber threat landscape and knowledge of threat actor groups.
• Proven ability to analyze complex data from various sources to form a cohesive threat picture.

Responsibilities

• Lead the design and continuous improvement of the cyber threat intelligence program.
• Perform deep-dives into cyber threats and analyze malware.
• Generate high-quality intelligence reports for technical and executive audiences.

Skills

Cybersecurity

Threat Intelligence Analysis

Communication Skills

Analytical Skills

Leadership

Tools

Threat Intelligence Platforms

SIEM Systems

Forensic Tools

Job description

Overview

Lead Threat Intelligence Analyst at Take-Two Interactive.

We are looking for a Lead Threat Intelligence Analyst to join our Information Security team, reporting to the Director of Security Operations Engineering. You will be at the forefront of our defense, leading efforts to identify, analyze, and counter emerging security threats, and work with security and technology teams to strengthen defenses and provide actionable intelligence to protect Take-Two and its systems, networks, and data.

What You’ll Take On

• Lead Threat Intelligence Operations: Lead the design, development, and continuous improvement of the organization’s cyber threat intelligence (CTI) program, ensuring alignment with business objectives and risk tolerance.
• Conduct In-Depth Analysis: Perform deep-dives into cyber threats, including analyzing malware, understanding adversary tactics, techniques, and procedures (TTPs), and tracking threat actor groups.
• Develop and Maintain Threat Models: Create and refine threat models and frameworks to predict and prepare for potential attacks, focusing on threats relevant to our industry and infrastructure.
• Enhance Our Security Posture: Work with our Global Security Operations Center (GSOC), Detection Engineering, Automation Engineers and Incident Response teams to integrate threat intelligence into our detection and prevention systems, improving our ability to identify and respond to threats.
• Produce Actionable Reporting: Generate timely and high-quality intelligence / Threat Landscape reports, risk forecasts and alerts for technical and executive audiences, translating complex threat information into clear, actionable insights.
• Automation: Promote automation of indicator ingestion, correlation, and dissemination across GSOC, Automation and IR platforms.
• KPIs: Define and track key performance indicators (KPIs) for the threat intelligence program (e.g., intelligence-to-action rate, time to disseminate).
• Maturity Assessment: Conduct periodic maturity assessments of the threat intelligence function, recommending improvements in processes, skills, and tools.
• Mentor and Guide: Provide guidance and mentorship to junior analysts, helping them grow their skills and contribute effectively to the team's mission.

What You Bring

• Experience: At least 5-7 years of experience in cybersecurity, with a minimum of 3 years in a dedicated threat intelligence role.
• Technical Expertise: A strong understanding of the cyber threat landscape, including knowledge of threat actor groups, common attack vectors, and malware families. Insider threat knowledge is a plus.
• Analytical Skills: Proven ability to analyze complex data from various sources (e.g., open-source intelligence, dark web forums, technical reports) to form a cohesive threat picture.
• Intelligence Framework Knowledge: Familiarity with common threat intelligence frameworks like MITRE ATT&CK, the Cyber Kill Chain, and Diamond Model.
• Communication Skills: Excellent written and verbal communication skills, with the ability to present technical information clearly to both technical and non-technical audiences.
• Tool Proficiency: Experience with threat intelligence platforms (TIPs), security information and event management (SIEM) systems, and forensic tools.

Great to Have

• Certifications: Relevant industry certifications such as GIAC GCTI, GREM, or other certifications from organizations like ISC2 or CompTIA.
• Scripting Skills: Proficiency in scripting languages (e.g., Python, PowerShell) to automate data collection and analysis tasks.
• Vulnerability Research: Experience with vulnerability analysis, exploit development, or reverse engineering.
• Leadership Experience: Prior experience leading a small team or a project.

What We Offer You

• Great Company Culture. Ranked as one of the most creative and innovative places to work, with core tenets of creativity, innovation, efficiency, diversity and philanthropy.
• Growth. Global entertainment company fostering environments where employees are encouraged to be themselves, curious, collaborative, and to grow within the company.
• Work Hard, Play Hard. Team activities, events, and opportunities to engage beyond work.
• Benefits. Medical (HSA & FSA), dental, vision, 401(k) with company match, employee stock purchase plan, commuter benefits, wellness programs, learning opportunities, and more.
• Perks. Fitness allowance, employee discounts, free games and events, stocked pantries.

Please be aware that Take-Two does not conduct job interviews or make job offers over third-party messaging apps. Only official Take-Two email addresses (take2games.com) will be used for recruitment. If you need to report an issue or have questions, please contact [e-mail].

As an equal opportunity employer, Take-Two Interactive Software, Inc. is committed to fostering diverse thoughts, cultures, and backgrounds. Take-Two does not discriminate or retaliate against any employee or job applicant based on race, color, religion, sex, national origin, age, disability, or any other protected characteristic. If you need to report a concern or have questions regarding Take-Two’s equal opportunity commitment, please contact [e-mail].

Seniority level

• Mid-Senior level

Employment type

• Full-time

Job function

• Information Technology

Industries

• Entertainment Providers