Cyber Threat Intelligence Analyst

BME | Bolsas y Mercados Españoles; Madrid; Presencial; EUR 45.000 - 75.000; Jornada completa

Descripción de la vacante

BME in Madrid, Spain, is seeking a motivated Cyber Threat Intelligence Analyst to advance automation, telemetry, and intelligence workflows. You will join a 24x7 CTI team and work with Threat Intelligence Platforms to contextualize threats and improve detection.

The role emphasizes automation and AI-driven analysis, with collaboration across SOC and security teams to operationalize intelligence insights and produce actionable threat reports.

Formación

• 4+ years in Cyber Threat Intelligence, incident response, SOC or related roles.
• Hands-on experience with automation, scripting or orchestration.
• Familiarity with AI applications in cybersecurity for automation and analytics.
• Experience with CTI platforms and security monitoring tools (OpenCTI, Elastic Stack, SIEM).
• Solid understanding of the intelligence lifecycle and MITRE ATT&CK for threat detection.

Responsabilidades

• Join an international CTI team operating 24x7, including on-call availability.
• Monitor and analyze intelligence from internal telemetry and monitoring systems to support investigations and threat detection.
• Own and improve weekly intelligence telemetry reporting, dashboards and visualizations.

Conocimientos

Automation

Scripting

Orchestration

AI in cybersecurity

Telemetry analysis

MITRE ATT&CK

Herramientas

OpenCTI

Elastic Stack

SIEM

Descripción del empleo

We are seeking a motivated Cyber Threat Intelligence (CTI) Analyst with a strong technical mindset to support the intelligence collection, automation and maturation of our intelligence capabilities.

The focus of this role in Cyber Threat Intelligence is to enhance cyber threat intelligence capabilities through automation, AI-driven analysis, and continuous improvement of telemetry and intelligence workflows. You will work closely with senior team members and partners to enhance the company's intelligence capabilities.

This position is available only in Spain due to the restrictions of some of the intelligence sources.

What You Will Do

• Join an international Cyber Threat Intelligence team operating 24x7, including on-call availability when required.
• Monitor, collect, and analyze intelligence from restricted communities, internal telemetry, and monitoring systems to identify actionable insights and support investigations, incident response, and threat detection activities.
• Own and continuously improve weekly intelligence telemetry reporting, dashboards, and visualization capabilities to provide accurate, consistent, and actionable insights to stakeholders.
• Contribute to the automation and orchestration of CTI workflows, including data collection, enrichment, analysis, reporting, and the integration of AI-driven capabilities for correlation, prioritization, and analytical output generation.
• Work with Threat Intelligence Platforms and security tooling, including OpenCTI, Elastic stack, SIEM, Threat Intelligence Platforms, and malware sandboxes, while applying frameworks such as MITRE ATT&CK to contextualize threats and improve detection effectiveness.
• Collaborate with SOC, Detection & Hunting, Vulnerability Management, Corporate Security, and other cross-functional teams to operationalize intelligence insights, produce threat reports and executive summaries, and support the continuous improvement and scalability of CTI processes.

What You Bring

• 4 years of experience in Cyber Threat Intelligence, incident response, SOC, or related technical cybersecurity roles.
• Strong technical profile with hands-on experience in automation, scripting, or orchestration
• Familiarity with AI applications in cybersecurity, particularly for automation, data processing, analytics, and intelligence workflow improvement.
• Experience with Threat Intelligence Platforms and security monitoring tools, including OpenCTI, Elastic stack, SIEM platforms, or similar technologies.
• Solid understanding of the intelligence lifecycle, telemetry analysis, tactical intelligence collection, and frameworks such as MITRE ATT&CK for threat detection and analysis