Senior Cyber Threat Intelligence Analyst

R.L. Polk S. de R.L. de C.V.; Monterrey; Hybrid; MXN 850,000 - 1,276,000; Full time

Benefits offered by this job

Hybrid work model

Job summary

Mobility Global in Monterrey, Mexico, is seeking a senior Cyber Threat Intelligence professional to own and run the CTI program end to end. You will define processes, participate as the SME across Cyber Defense, and monitor intelligence from multiple sources to produce actionable briefings and actor profiles.

Travel up to 10% may be required; this is a hybrid role with in-office and remote arrangements outlined in the contract. Applicants must be legally authorized to work in Mexico.

Qualifications

• 4+ years of hands-on experience in cyber threat intelligence.
• Experience with commercial threat intel platforms such as Recorded Future, Flashpoint, Mandiant Threat Intel, Google Threat Intel, CrowdStrike Falcon, or similar.
• Strong understanding of MITRE ATT&CK, the Diamond Model, and the Cyber Kill Chain.
• Demonstrated experience implementing AI agents or tools to support CTI operations, and ability to independently own and run an intelligence program end to end.
• Strong analytical and problem‑solving skills with excellent written and verbal communication.

Responsibilities

• Own and run the CTI program end to end, from collection through analysis, production, dissemination, and feedback.
• Define and mature CTI processes, standards, and roadmap.
• Serve as the primary point of contact for cyber threat intelligence across Cyber Defense.
• Monitor, collect, and analyze intelligence from commercial threat intel platforms and open sources; manage subscriptions.
• Produce structured intelligence products including briefs, reports, and actor profiles.
• Track threat actors, campaigns, and TTPs relevant to the industry.
• Implement AI-assisted workflows to support CTI operations and accelerate triage.
• Partner with DFIR and Threat Hunting teams to feed intelligence into investigations.

Skills

Cyber threat intelligence

Threat intel platforms

AI in CTI

Analytical problem solving

Written and verbal communication

Tools

Recorded Future

Flashpoint

Mandiant Threat Intel

Google Threat Intel

CrowdStrike Falcon

Job description

Location: Monterrey, Mexico | Employer: R.L. Polk S. de R.L. de C.V.

Why Mobility Global? At Mobility Global, our mission is to provide the trusted information that helps billions of people build, sell, and own vehicles with confidence. As we shape the next generation of automotive intelligence through innovation, AI, and industry-leading data, we are creating new opportunities for our customers, our business, and our people. CARFAX, a division of Mobility Global, helps millions of people every day confidently shop, buy, service and sell used cars with innovative solutions powered by CARFAX vehicle history information. Shop, Buy, Service, Sell – Show me the CARFAX™.

What You’ll Do

• Own and run the Cyber Threat Intelligence (CTI) program end to end, from collection through analysis, production, dissemination, and feedback.
• Define and continuously mature the CTI program’s processes, standards, and roadmap.
• Serve as the primary point of contact and subject matter expert for cyber threat intelligence across Cyber Defense.
• Monitor, collect, and analyze intelligence from commercial threat intel platforms and open source and public sources, and manage and prioritize platform subscriptions and sources to maximize relevance and value.
• Produce structured, actionable intelligence products, including strategic, operational, and tactical briefs, indicator and TTP reports, and threat actor profiles.
• Track threat actors, campaigns, and TTPs relevant to the organization’s industry and threat landscape.
• Implement AI agents and AI-assisted workflows to support CTI operations, such as automating source monitoring, synthesizing intelligence from multiple platforms into structured briefs, and accelerating triage of raw threat data.
• Partner with DFIR and Threat Hunting teams, feeding intelligence into investigations and hunts and incorporating their findings back into the intelligence picture.
• Partner with Security Engineering to translate intelligence into detection context within Google SecOps.

What We’re Looking For

Required Qualifications

• 4+ years of hands‑on experience in cyber threat intelligence.
• Experience working with commercial threat intel platforms such as Recorded Future, Flashpoint, Mandiant Threat Intel, Google Threat Intel, CrowdStrike Falcon, or similar.
• Strong understanding of the threat intelligence lifecycle and common frameworks such as MITRE ATT&CK, the Diamond Model, and the Cyber Kill Chain.
• Demonstrated experience implementing AI agents or tools to support CTI operations, and a proven ability to independently own and run an intelligence program end to end, without relying on a larger team.
• Strong analytical and problem‑solving skills, with the ability to independently investigate and resolve complex technical challenges, and excellent written and verbal communication skills, including the ability to document technical solutions, detections, workflows, and operational procedures.

Expected Hours of Work: This is a full‑time position. Work is generally performed Monday through Friday; however, limited participation in on‑call rotations, after‑hours escalations, weekends, and holidays may be required to support cybersecurity operations and major incidents.

Travel Requirements: Up to 10% of domestic and international travel may be required. Travel may include team meetings, training events, leadership workshops, cybersecurity conferences, and operational reviews. This is a hybrid role. The in‑office and remote arrangement will be set out in the employment contract.

Applicants must be legally authorized to work in Mexico at the time of hire.

The company is unable to provide immigration or work permit support for this position.

The gross annual base salary for this position is $850,000 – $1,276,000 MXN. The final offer will be based on experience, skills, and qualifications, consistent with the principle of equal pay for equal work.

Equal Opportunity Mobility Global is committed to equal opportunity and non‑discrimination in accordance with Mexican law. Hiring decisions are not based on origin, sex, gender, sexual orientation, age, disability, health, pregnancy, religion, marital status, appearance, or any other characteristic protected by law.

We provide reasonable accommodations for candidates with disabilities.

Mobility delivers Essential Intelligence® that shapes decision making. We provide the world’s leading organizations with the right data, connected technologies and expertise they need to move ahead.

As part of our team, you’ll help solve complex challenges that equip businesses, governments and individuals with the knowledge to adapt to a changing economic landscape.