Threat Intelligence Analyst

Tata Consultancy Services; Chennai District; On-site; INR 900,000 - 1,100,000; Full time

Job summary

Tata Consultancy Services is seeking a Threat Intelligence Analyst to drive threat intelligence operations across SOC and security engineering teams. You will produce tactical, operational, and strategic intelligence reports and map adversary TTPs to MITRE ATT&CK to inform detections and hunting.

You will validate IOCs, support investigations into phishing and ransomware, and maintain threat actor profiles and collection plans while coordinating with stakeholders.

Qualifications

• Experience in Threat Intelligence Lifecycle and analysis practices.
• Proficiency in IOC analysis and validation.
• Ability to map TTPs to MITRE ATT&CK and related frameworks.
• Experience with SIEM, SOAR, and TIP platforms.
• Strong communication with stakeholders.

Responsibilities

• Collect and analyze threat intelligence from feeds and internal findings.
• Produce reports for SOC, security engineering, and leadership.
• Map adversary TTPs to MITRE ATT&CK and translate into detection content.
• Validate IOCs including IPs, domains, URLs, hashes, and campaigns.
• Support phishing, BEC, ransomware investigations with adversary context.
• Maintain threat actor profiles, requirements, and collection plans.
• Manage threat feeds in SIEM, SOAR, TIP while reducing false positives.
• Provide briefings on emerging threats and recommended actions.

Skills

Threat Intelligence Lifecycle

IOC Analysis & Validation

TTP Analysis and Adversary Tracking

MITRE ATTACK Framework

Cyber Kill Chain & Diamond Model

SIEM, SOAR, and TIP Platforms

EDR/XDR Technologies

Email Security & Malware Analysis

Detection Engineering & Threat Hunting

Stakeholder Communication

Job description

• Collect and analyze threat intelligence from commercial feeds, OSINT, ISACs, vendor advisories, malware reports, and internal incident findings.
• Produce tactical, operational, and strategic threat intelligence reports for SOC teams, security engineering teams, and leadership stakeholders.
• Map adversary TTPs to the MITRE ATT&CK framework and translate intelligence into threat hunting hypotheses, detection content, and SOAR enrichment.
• Validate and investigate IOCs, including IP addresses, domains, URLs, hashes, malware families, and campaign indicators.
• Support investigations related to phishing, BEC, ransomware, cloud compromise, and targeted attacks by providing adversary context.
• Maintain threat actor profiles, intelligence requirements, collection plans, and business risk mappings.
• Manage and optimize threat feeds within SIEM, SOAR, and TIP platforms while reducing false positives and duplicate indicators.
• Provide regular briefings on emerging threats, attack campaigns, and recommended security actions.

Mandatory Skills

• Threat Intelligence Lifecycle
• IOC Analysis & Validation
• TTP Analysis and Adversary Tracking
• MITRE ATT&CK Framework
• Cyber Kill Chain & Diamond Model
• SIEM, SOAR, and TIP Platforms
• EDR/XDR Technologies
• Email Security & Malware Analysis
• Detection Engineering & Threat Hunting
• Strong Stakeholder Communication Skills

Preferred Certifications