Cyber Threat Intelligence Analyst

aspenview; Poland; Hybrid; PLN 70,000 - 110,000; Full time

Benefits offered by this job

Competitive base salary

Flexible work model: hybrid, remote,or

Growth opportunities and leadership

Inclusive culture

Job summary

AspenView is seeking a Junior Cyber Threat Intelligence Analyst to join our growing security team. You will collect, analyze, and contextualize threat data, map TTPs to MITRE ATT&CK, and produce actionable intelligence for technical and business stakeholders.

You will track IOCs, actors, and campaigns, maintain structured records, and support senior analysts with research requests. Opportunity to grow skills in automation and CTI tooling within a modern stack.

Qualifications

• 1-3 years of experience in cyber threat intelligence or a closely related security role (SOC, incident response, vulnerability management, or similar).
• Solid written English, with the ability to produce clear, well-structured intelligence reporting for varied audiences.
• Familiarity with the MITRE ATT&CK framework and how to apply it to adversary behavior.
• Comfort working with at least one intelligence or security operations platform.
• Light scripting (e.g., Python) or no-/low-code automation experience.
• Familiarity with OSINT techniques and IOC enrichment.
• GIAC GCTI, CompTIA Security+, or similar certifications.
• Awareness of the intelligence lifecycle and structured analytic techniques.

Responsibilities

• Gather threat data from internal platforms, OSINT, and commercial intelligence feeds, and assess its relevance and reliability.
• Map observed adversary tactics, techniques, and procedures (TTPs) to the MITRE ATT&CK framework.
• Track indicators of compromise (IOCs), threat actors, campaigns, and emerging vulnerabilities relevant to the organization.
• Maintain accurate, well-structured records within the team's intelligence platform(s).
• Produce clear, concise written intelligence, including alerts, summaries, and briefings, tailored to technical and non-technical audiences.
• Support senior analysts with research for deeper threat assessments and stakeholder requests.
• Help set up lightweight automations and integrations across the CTI toolstack to reduce manual effort and speed up analysis.
• Keep feeds, enrichments, and platform configurations tidy and dependable.
• Work with SecOps, incident response, and vulnerability teams to share relevant intelligence.
• Continuously build tradecraft, including frameworks, sources, and analytic techniques, under the guidance of senior analysts.

Skills

Analytical mindset

Written English communication

Source reliability assessment

Education

Bachelor's degree in Cybersecurity, Information Security, Computer Science, Intelligence Studies, or related field

Tools

Silobreaker

CrowdStrike Recon+

BlueVoyant

Flashpoint

Job description

Build the Future with AspenView Technology Partners

At AspenView, we are passionate about transforming the way organizations approach technology. We specialize in creating high-performing, nearshore IT teams to help North American clients innovate faster and more efficiently. As we continue to grow, we’re looking for exceptional people to join our team and help drive impactful change across industries.

Why Join AspenView?

At AspenView, we’re more than a nearshore IT partner—we’re a people-first, purpose-driven company that believes great culture drives great outcomes. We’re passionate about connecting talent and technology to deliver measurable value for clients—and meaningful career paths for our people.

Here’s what you can expect:

• Competitive base
• Flexible work model: hybrid, remote, or in-office
• Real growth opportunities and leadership visibility
• Inclusive, respectful culture that blends U.S. innovation with Colombian heart
• A company that listens, invests in you, and celebrates wins together

About the role

We are seeking a Junior Cyber Threat Intelligence (CTI) Analyst to support a growing intelligence function within an enterprise security team. Working alongside senior analysts, you will collect, analyze, and contextualize threat data, mapping adversary behavior to MITRE ATT&CK, tracking indicators and tactics, and turning raw signals into clear, actionable intelligence for technical and business stakeholders. This is a hands-on, growth-oriented role for someone early in their CTI career who is curious, detail-oriented, and eager to sharpen both their analytical tradecraft and their automation skills across a modern CTI toolstack.

What you will do:

Intelligence Collection & Analysis

Gather threat data from internal platforms, OSINT, and commercial intelligence feeds, and assess its relevance and reliability.

Map observed adversary tactics, techniques, and procedures (TTPs) to the MITRE ATT&CK framework.

Indicator & Threat Tracking

Track indicators of compromise (IOCs), threat actors, campaigns, and emerging vulnerabilities relevant to the organization.

Maintain accurate, well-structured records within the team's intelligence platform(s).

Reporting & Communication

Produce clear, concise written intelligence, including alerts, summaries, and briefings, tailored to technical and non-technical audiences.

Support senior analysts with research for deeper threat assessments and stakeholder requests.

Tooling & Automation

Help set up lightweight automations and integrations across the CTI toolstack to reduce manual effort and speed up analysis.

Keep feeds, enrichments, and platform configurations tidy and dependable.

Collaboration & Growth

Work with SecOps, incident response, and vulnerability teams to share relevant intelligence.

Continuously build tradecraft, including frameworks, sources, and analytic techniques, under the guidance of senior analysts.

Tools & Technologies:

Frameworks:

MITRE ATT&CK.

CTI Platforms:

Comfort working with at least one intelligence or security operations platform (e.g., a threat intelligence platform, SIEM, or SOAR).

Nice to have:

Silobreaker, CrowdStrike Recon+, BlueVoyant, or Flashpoint.

What you bring

Experience:

1-3 years of experience in cyber threat intelligence or a closely related security role (SOC, incident response, vulnerability management, or similar).

Communication:

Solid written English, with the ability to produce clear, well-structured intelligence reporting for varied audiences.

Framework Knowledge:

Familiarity with the MITRE ATT&CK framework and how to apply it to adversary behavior.

Platform Experience:

Comfort working with at least one intelligence or security operations platform.

Mindset:

A curious, detail-oriented analytical mindset and good judgment about source reliability.

Education:

Bachelor's degree in Cybersecurity, Information Security, Computer Science, Intelligence Studies, or a related field, or equivalent practical experience.

Nice if you have:

Strong Differentiator:

Ability to set up lightweight automations and integrations across the CTI toolstack, connecting feeds and enrichments, wiring tools together through APIs, and removing repetitive manual steps.

Platform Exposure:

Prior exposure to one or more CTI platforms such as Silobreaker, CrowdStrike Recon+, BlueVoyant, or Flashpoint.

Scripting/Automation:

Light scripting (e.g., Python) or no-/low-code automation experience.

OSINT:

Familiarity with OSINT techniques and IOC enrichment.

Certifications:

GIAC GCTI, CompTIA Security+, or similar.

Intelligence Lifecycle:

Awareness of the intelligence lifecycle and structured analytic techniques.

Equal Opportunity Employer

AspenView is proud to be an equal opportunity employer. We believe in creating an environment where all employees feel welcome, valued, and empowered to succeed. We celebrate diversity and strive to build a culture of inclusion where all individuals, regardless of their race, color, gender, gender identity or expression, sexual orientation, disability, age, or any other characteristic, can thrive. We encourage applicants from all walks of life to join our team and make a lasting impact.