Cyber Threat Intelligence Analyst

Kyndryl; Dadri, Greater Noida; Hybrid; INR 1,800,000 - 3,000,000; Full time

Job summary

Kyndryl is seeking a seasoned Cyber Threat Intelligence SME in India to work with SOC engineers, incident responders, and architects. You will document logic, tune parameters, and participate in governance while hunting APTs and detecting zero-days.

Expect to monitor IOCs and gather data from logs, feeds, and social media, then share insights with executives. You will produce executive dashboards and collaborate with SOAR and SIEM teams to automate threat detection and response workflows,

Qualifications

• Bachelor’s degree in CS/Cybersecurity/IT or related field.
• Experience with workloads, servers, networking architectures and security controls.
• Experience with threat intelligence tools and feeds (open, commercial, and dark web).
• Familiarity with governance, risk and compliance (NIST/RMF) processes.

Responsibilities

• Collaborate with SOC engineers, architects, and incident responders.
• Document content logic, assumptions, and tuning parameters.
• Participate in governance and change management processes.
• Hunt for APTs and zero-day exploits.
• Monitor threat actor activity, TTPs, and IOCs.
• Gather raw data from internal logs, external feeds, and social media.
• Disseminate intelligence to SOCs, CISOs, and executives.
• Produce executive dashboards and situational awareness reports.
• Collaborate with SOAR and SIEM teams to automate threat detection and response workflows.
• Review threat briefs with SOC analysts and refine detection logic.

Skills

Threat intelligence

SOC collaboration

Threat hunting

Governance & compliance

Data analysis

Executive reporting

Education

Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or related field

Tools

Google

Job description

Role & responsibilities

• Having 7+ years of experience in CTI SME
• Working with SOC engineers, architects, and incident responders.
• Documenting content logic, assumptions, and tuning parameters.
• Participating in governance and change management processes
• Hunting for advanced persistent threats (APTs) and zero-day exploits.
• Monitoring threat actor activity, TTPs (Tactics, Techniques, and Procedures), and Indicators of Compromise (IOCs).
• Leveraging threat feeds from open, commercial, and dark web sources
• Gathering raw data from internal logs, external feeds, and social media.
• Sorting, filtering, and analysing data to extract actionable insights.
• Disseminating intelligence to SOCs, CISOs, and executive stakeholders
• Producing executive-level dashboards and situational awareness reports.
• Advising on risk mitigation strategies and compliance frameworks (e.g., NIST, RMF).
• Supporting audits and regulatory reporting through tailored intelligence briefs
• Collaborate with SOAR and SIEM teams to Automate threat detection and response workflows.
• Work closely with SOC analysts (L1L3) and SIEM Engineering Team to review threat briefs and refine detection logic

Preferred candidate profile

• Bachelors degree in Computer Science, Cybersecurity, Information Technology, or other related fields
• Experience with workload, server, network architectures and associated security controls
• Tool: Google